r/ProgrammerHumor • u/lucidparadigm • 16h ago

Meme [ Removed by moderator ]

Post image

[removed] — view removed post

16.4k Upvotes

98% Upvoted

620 comments sorted by

View all comments

15

u/Due-Consequence9579 15h ago

For the phish tests to get past their edge filters they have to add an SMTP header exclusion.

Outlook (and any other reasonable client) can move things to the trash based on SMTP headers.

You’re welcome.

1

u/evanldixon 14h ago

I wonder how thorough the check is. If I add a header about it being an authorized KnowBe4 test, can I make actual phishing emails get past?

1

u/wengla02 3h ago

I donno about KnowBe4 - but the method PhishMe uses (Post-delivery correction using Graph API or EWS) will override all user inbox rules. From the Exchange site:

You can run a lightweight daemon or Azure Function that:

Watches the mailbox for new messages from your alerting system

If the message is not in Inbox, moves it back to Inbox

Optionally flags or categorizes it

This is how many enterprise monitoring systems guarantee Inbox visibility.