Viewing Affected Recipients

Affected recipients are recipients of malicious or suspicious email messages. Gain intelligence about who in your network is targeted by spear-phishing attacks or social engineering attacks and understand the attack behavior in related messages. Learn if your executive is targeted by the attacks and then raise his/her awareness about the attack pattern. Discovering a community of affected recipients belonging to the same department can indicate that the attacker has access to your company address book.

Procedure

Go to Detections → Recipients.
Specify the search criteria.
- Recipient (email address)
- Period
Click Search.

All email messages matching the search criteria appear.

View the results.

Header	Description
Recipients	View the detected message recipient email addresses.
Detections	View the email messages with malicious or suspicious characteristics. Signature-based detection involves searching for known patterns of data within executable code or behavior analysis. Click the number to see more information about the suspicious message.
High Risk	View the detected messages with malicious characteristics.
Medium Risk	View the detected messages with characteristics that are most likely malicious.
Low Risk	View the detected messages with suspicious characteristics.
	View the number of email messages with embedded malicious links.
	View the number of email messages with malicious file attachments.
Latest Detection	View the most recent occurrence of the detected message.

$('#title').html($('meta[name=description]').attr('content'));

Viewing Affected Recipients

Procedure