User Tools

Site Tools


outlook_plugin_phishing_incidents

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
outlook_plugin_phishing_incidents [2019/01/16 18:16] lucyoutlook_plugin_phishing_incidents [2019/04/03 18:06] – [Download Outlook Plugin & Deployment] lucy
Line 94: Line 94:
 The deployment can be done via MSI file which can be downloaded after the initial configuration under the "incidents" menu (/admin/incidents). The plugin installer needs user to have read and write access at least to keys under HKCU (current user). The deployment can be done via MSI file which can be downloaded after the initial configuration under the "incidents" menu (/admin/incidents). The plugin installer needs user to have read and write access at least to keys under HKCU (current user).
  
-{{ dl_ot.png?600 }}+{{ :download_plugin.png?600 |}}
  
 +User Wide plugin will affect only one user of a particular PC.
 +Machine Wide plugin will be available for every user of a PC once it is installed.
  
 +Upon installation, a temporary config.dat file is created. But all settings are written in the registry and can therefore be controlled via GPO. The plugin may be installed in the user context HKCU or in machine context (to HKLM.
 ===== Download Office365 Plugin & Deployment ===== ===== Download Office365 Plugin & Deployment =====
  
Line 105: Line 108:
   - go to incidents, press "Download Plugin" -> "Microsoft Outlook 365", your browser will download an XML file   - go to incidents, press "Download Plugin" -> "Microsoft Outlook 365", your browser will download an XML file
   - go to MS Outlook - https://outlook.live.com/owa/   - go to MS Outlook - https://outlook.live.com/owa/
-  - press "cog" icon and then "Manage Add-ins" +  - open  any email and press "Get Add-ins" as it described on the screenshot below 
-  - click "Click here to add a custom add-intext right below the page title +  - go to "My add-insand upload the XML file from the step 1 
-  - upload the XML you downloaded on step 1 +  - go to Settings -> Customize actions, select the LUCY Add-In, press "Save" button 
-  - go to any email in your inbox, you will see a little monkey on the top right in email header+  - Now in email panel, you will see a monkey icon, which is the add-in
   - press the monkey and hit "Send Report" on the right   - press the monkey and hit "Send Report" on the right
   - on Macs the monkey will be visible on the ribbon menu   - on Macs the monkey will be visible on the ribbon menu
  
-{{ mac_button.png?600 }}+ 
 +{{ :get_add-ins.png?400 |}} 
 +{{ :customize.png?400 |}} 
  
  
Line 134: Line 140:
  
   - Download Gmail plugin file from Lucy   - Download Gmail plugin file from Lucy
-  - Upload the file to Google Drive +  - Open Google Drive in web browser, select the uploaded file, click on it with the right mouse button and choose "Open with" -> Connect more apps -> Search for "Google Apps Script" -> Connect 
-  - Open Google Drive in web browser, select the uploaded file, click on it with right mouse button and choose "Open with" -> "App Script"+  - Right click on the file again, "Open with" -> Google Apps script
   - A new tab will open, there In main menu click "Publish" -> "Deploy from manifest"   - A new tab will open, there In main menu click "Publish" -> "Deploy from manifest"
   - The modal window will open, click "Get ID" in there   - The modal window will open, click "Get ID" in there
   - Copy the "Deployment ID" from the window   - Copy the "Deployment ID" from the window
-  - Go to Gmail web application, go to "Settings" -> "Addons"+  - Go to Gmail web application, go to "Settings" -> "Add-ons(https://mail.google.com/mail/u/0/#settings/addons)
   - Enable "Allow add-ons for developers in this account" checkbox   - Enable "Allow add-ons for developers in this account" checkbox
   - Paste add-on's Deployment ID into the "Install developer add-on" textbox and click "Install"   - Paste add-on's Deployment ID into the "Install developer add-on" textbox and click "Install"
   - In the "Install developer add-on" dialog that appears, click the checkbox to indicate that you trust this developer, then click Install   - In the "Install developer add-on" dialog that appears, click the checkbox to indicate that you trust this developer, then click Install
  
 +{{ :google_apps_script.png?400 |}}
 +{{ :deploy_from_manifest.png?400 |}}
 +{{ :get_id.png?400 |}}
 +{{ :install.png?400 |}}
  
 ===== Where do you see the incidents reported by the users? ===== ===== Where do you see the incidents reported by the users? =====
outlook_plugin_phishing_incidents.txt · Last modified: 2021/09/24 13:18 by lucysecurity