Audit Reporting

Audit reporting for Recurring Phish is accessible via two routes:

1. Phishing → Reports → select the simulation → View Audits
2. Phishing → Phish Activity → action menu → View Audit

Both routes lead to the same Phish Audit page. The audit displays per-user results across the full recurring sequence, broken down by individual run. 

Below is an example of a planned Recurring Phish:

The Overview tab displays an aggregated view of the following engagement metrics for the entire Recurring Phish:

• Opened - users who opened the phishing email
• Clicked - users who clicked the phishing link
• Data entered - users who submitted data on the phishing landing page
• Attachments opened - users who opened a simulated email attachment
• QR codes scanned - users who scanned a QR code within the email
• Reported - users who correctly reported the phishing email

Note: Data will begin to appear in the audit once the first run of the simulation has started. Full data for a given run will not be available until that run has completed. This is expected behaviour.

Other Phish Reporting

Recurring Phish simulations are included in all other existing phish reports, for example the Phish Overview Report.

Each individual run of a Recurring Phish can be viewed in relevant reports. The name of a Recurring Phish run will be appended with "- Run x of x" so you can easily identify it.