LUCY allows you to schedule a campaign. Those mechanisms allow you to build an intelligent phishing campaign with multiple rules, testing user awareness in different scenarios and also different time periods. This might keep the security awareness at a high level if users know that the company performs sample phishing tests on a small group of random users over a long period.
LUCY comes with scheduler rules and new with a scheduler plan that allows you to verify the existing rules. Please use the following configuration tutorial to setup your scheduler:
Step 1: Preparation. The scheduler uses the local time & time zone. Therefore, you should make sure, that you have set the correct time & time zone before working with scheduler rules.
Step 2: Add Recipients to your campaign (lets say you have 2 scenarios and 1 recipient group, and then add the 1 group to both scenarios, the 1 group then will get a separate message for each scenario). If you want to distribute your 1 recipient group over multiple scenarios (so a recipient will only get 1 message for one of the both scenarios), you need to click on the checkbox "distribute users over the selected scenarios":
Step 3: Define scheduling rules.
The scheduler rules have the following options:
Step 4: Verify your scheduler settings. Once you build the rule(s) you can click scheduling plan and LUCY will show you which recipient will get a message when and with which scenario. This allows you to verify if the scheduler is configured as planed.
Step 5: Start your campaign. After configuring the scheduler you still need to click "START / REAL ATTACK". Lucy will then perform all the campaign based checks and send out the mails according to your scheduler settings.
If you want to specify a specific time frame between each mail you can use the scheduler calculator. Please enter the number of recipients, the desired gap between each email and the start time, then LUCY will automatically cerate your scheduling rule with the correct end date/time:
In LUCY you have the ability to create scheduling rules based on different time zones. If you specify a longer time range you can also ensure, that mails are not sent out on weekends by selecting the checkbox:
Initial position: lets assume you want to setup a phishing campaign that repeats for three month. You have 6 employees split into 3 groups and 3 attack scenarios. You want to split up the 3 attack scenarios among those 3 groups in a way, that every month, an employee just gets only 1 attack scenario. After 3 months, every employee should have received 3 unique attacks.
Solution A - One Shot:
email@example.com Scenario 1 08.2017 22:22:00 (Europe/Brussels) firstname.lastname@example.org Scenario 2 09.2017 22:07:00 (Europe/Brussels) email@example.com Scenario 3 10.2017 22:07:00 (Europe/Brussels)
The "problem" with this approach is, that LUCY will send all emails for scenario A in first month, all emails for scenario B in second month, etc. If you want more "randomisation", you can use overlaying dates in your scheduling rules (e.g. rule 1 starts at day 1 from month 1 and ends on last day of month 3, rule 2 starts middle of month 1 and ends at middle of month 2, rule 3 starts at the beginning of month 2 and ends at the second month).
Solution B - 12 Repeating Rules:
Solution Bi-weekly rule:
Let's assume that you need to create a plan to send emails during two months starting on the beginning of next month and sending letters proceeding only in working days.
In LUCY > 4-0 we added a randomization feature, that allows you to split up your recipients over different scenario's using the scheduler.
Here is an example how this can be used: Let’s assume you want to setup a campaign over a period of 3 months as an example. The campaign has 3 scenarios and you want to test 100 users in total. Each month, you would want each user to randomly receive 1 of the 3 scenarios. Each month, each user has to receive a different one of these 3 emails so that at the end, they have all seen all 3 emails but in different months. How can this be done?
Using the randomization feature in LUCY it can be done in an easy way. The way the randomization works is, that LUCY randomly only sorts out the list of recipients in between different scenarios.
Please note that the delay for the Lure message does not work if you create a single schedule rule for both attack and lure ⇒ it sends the lure immediately along with the attack. Use a separate scheduling rule for the lure attack.
Starting from Lucy 4.8 multiple awareness scenarios can be added to an awareness-only campaign. The scheduling tool is able to manage rules for different awareness scenarios as well. In order to create a Rule for a particular awareness scenario simply choose Awareness in the Email Type dropdown. Then choose Awareness Group and recipient groups bound to the attack scenario. Here you can also exclude groups from the rule in case you want different groups to receive awareness not simultaneously. Please note that the rule will be applied to all scenarios bound to Awareness Groups included.
LUCY allows you to schedule a campaign. The Yearly Campaign Rule Type mechanism provides a possibility to build an intelligent phishing campaign, testing user awareness in different scenarios over a year. The campaign can be set up once and never be stopped. The only concern would be adding the recipients to an existing group. New recipients will be automatically added to the plan starting next month. This might help to keep the security awareness of the organization at a high level and to determine the level of security knowledge among the fresh new co-workers.
The Yearly Campaign feature can be found in the section:
Campaign > Schedule > Add Rule > Rule Type > Yearly campaign
The Rule Type is available for both Phishing Scenarios with included Training and Only Awareness Campaigns.
Send within each month - scheduled randomly during the whole month.
Send at the beginning of each month - scheduled randomly from 1 to 9 day of the month.
Send in the middle of each month - scheduled randomly from 10 to 20 day of the month.
Send at the end of each month - scheduled randomly from 21 to end of the month.
The configuration of the running scenarios per month is provided by the Drag&Drop interface after the main settings.
Awareness Groups Setup
To set up several training scenarios for the campaign with a yearly scheduler the awareness groups need to be created beforehand. In this case, scenarios are bound to Awareness Groups that later also are bound to recipient groups that will receive awareness scenarios. Awareness Groups are also used by Scheduler to build rules for different scenarios. Awareness Groups are managed under Awareness Settings > Awareness Groups. In order to create a new group simply enter the unique name and click Add. Awareness groups allows to group a pack of awareness by Risk Level. In case if it is necessary to send out several trainings to Risk level 0, please create an awareness group per awareness scenario, bound each scenario to a group.
To add another scenario to the awareness-only campaign proceed to Awareness Settings and click +New Awareness. Inside Scenario settings choose Awareness Groups and bind the scenario to an awareness group that you created or a default one.
As a result, you should have all the scenarios bound to awareness groups. Now it's time to bound recipients to Awareness Groups. Under Recipients, delete all existing groups and add a new one. Check Awareness Groups that recipients should receive scenarios from. Hit Save.
Scheduler now will be capable of building rules for multiple awareness scenarios.
Drag & Drop Interface
The list of available awareness and attack scenarios in the campaign is on the right side. The list of the scenarios depends on the scenarios selected for the campaign. If the campaign type is an attack, then both kinds of scenarios are present, if the campaign is awareness only, then only awareness scenarios are being displayed.
On the left side is a list of months from 1 to 12 with an unfilled list of scenarios. The month number means the month since the new recipient has been added to the existing recipient group.
Drag a scenario from the list of scenarios (right side) to the left side and drop it over any month number. The scenario becomes visible under the corresponding month meaning that this scenario should be executed during the month according to the Scheduler Main Settings.
In case a scenario should be removed from the specific month, drag a scenario from the list of months and drop it outside this list. The scenario would disappear from the month list.
If an attack scenario is selected, there's a possibility to select an awareness scenario that should be sent in case of the recipient gets phished by the selected attack scenario.
Once the configuration is confirmed, make sure to select the recipient group and press the Save button to create the Scheduler Rule.
After that, the Scheduler Plan can be created and analyzed for this specific configuration.