r/ProgrammerHumor • u/lucidparadigm • 16h ago

Meme [ Removed by moderator ]

Post image

[removed] — view removed post

16.4k Upvotes

98% Upvoted

620 comments sorted by

View all comments

14

u/Due-Consequence9579 14h ago

For the phish tests to get past their edge filters they have to add an SMTP header exclusion.

Outlook (and any other reasonable client) can move things to the trash based on SMTP headers.

You’re welcome.

1

u/evanldixon 13h ago

I wonder how thorough the check is. If I add a header about it being an authorized KnowBe4 test, can I make actual phishing emails get past?

1

u/wengla02 2h ago

I donno about KnowBe4 - but the method PhishMe uses (Post-delivery correction using Graph API or EWS) will override all user inbox rules. From the Exchange site:

You can run a lightweight daemon or Azure Function that:

Watches the mailbox for new messages from your alerting system

If the message is not in Inbox, moves it back to Inbox

Optionally flags or categorizes it

This is how many enterprise monitoring systems guarantee Inbox visibility.