Incident Autoresponder

Navigate to Settings > Submitted Email Settings > Autoresponder

Introduction

The Incident Autoresponder feature in LUCY allows administrators to automatically respond to emails submitted via the phishing button. The response can include the risk score calculated by LUCY and you can define separate responses for real incidents and simulations.

%score% - The email's calculated risk score.

---

Autoresponse Detection

Navigate to Settings > Submitted Email Settings > Auto Response Detection

Sometimes the reply that LUCY receives is not a report but an out-of-office message or some other automatic reply. In order to avoid a situation where two autoresponders are talking to each other, you can define various phrases that LUCY can check for in its messages to determine if the response came from an autoresponder.

You can create a list of phrases by separating each phrase with a comma.

Timeout - Any reply within this number of seconds will be considered an autoresponse and LUCY will treat it accordingly.

Out of Office Delay - Time (in days) before LUCY re-sends the message that triggered the autoresponse.

Out of Office Phrases - Provide a list of text patterns here and LUCY will scan incoming messages for these phrases. If any are found, LUCY will treat the message as an autoresponse.

Bounced Phrases - Similar to Out of Office, any message that contains a phrase from this list will be treated as a bounced message. LUCY will attempt to re-send bounced messages until the message returns a different status.