We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

User-Reported Emails

  • Last updated on

You can view and create incidents based on emails that users report as suspicious. In this article, instructions for creating an incident are provided first, followed by ways that users can report the emails. 

Viewing and Creating an Incident from User-Reported Emails

To View and Create an Incident from User-Reported Emails:

  1. Go to Barracuda Forensics & Incident Response, logging into https://forensics.barracudanetworks.com/.
  2. From the menu, select User-Reported Emails.
  3. The User-Reported Emails page displays information about suspicious emails that were reported by users, including:
    • Last Reported Date – The date the email was reported. If the same email was reported more than once, the most recent date it was reported. 
    • Number of Users Reported – How many unique users reported this email. Hover over this value to see the corresponding email address(es).
    • Sender Email – Email address for the sender of the suspicious email. 
    • Subject – Subject of the suspicious email.Affected Mailboxes – How many mailboxes in your organization also received this suspicious email. 
    • Sample Email – Displays a copy of the email. If there is more than one email in that row, a representative sample from the group is displayed.
  4. Optional. To create an incident based on a user-reported email, click Create Incident for that email. Follow the incident creation wizard steps as described in Creating an Incident. The relevant information from the email you selected is automatically entered into the search screen of the wizard.

Barracuda recommends:

  • First remediating emails with a warning symbol threatDetected.png, indicating a known threat.
  • Prioritizing remediating emails that affect multiple mailboxes.

Receiving Alerts for User-Reported Emails

You can configure the system to automatically send you alerts when a user reports a suspicious email. 

To create automatic alerts when a user reports a suspicious email:

  1. Go to Barracuda Forensics & Incident Response, logging into https://forensics.barracudanetworks.com/.
  2. From the menu, select User-Reported Emails.
  3. Click the Settings icon gearIcon.png in the upper right corner of the screen. 
  4. Specify that you want to receive alerts.
  5. Specify whether you want to use the same email address for the security team members that you alert for other alerts. 
    If you choose to use the same email address, it will autofill for you. Otherwise, an email address to receive these alerts.
  6. Click Save

How Users Report Suspicious Emails

From the Barracuda Outlook Add-In 

Within the Barracuda Outlook Add-In, users can report suspicious emails, as shown below. This allows end users to be active participants in reporting phishing and spearphishing emails. These reports go to Barracuda Central and Barracuda Forensics & Incident Response. Administrators of Barracuda Forensics & Incident Response can investigate these end-user reported emails, create incidents, and take corrective action.

submitSuspicious.png

For more information, refer to Barracuda Essentials for Email Security Outlook Add-In. A Barracuda Essentials account is not required for this functionality.

From the Barracuda Essentials Message Log

Note that a Barracuda Essentials Account is required for this functionality.

Administrators reviewing message logs within Barracuda Email Security Service might notice that there is suspicious email. Messages marked as Incorrectly Delivered are reported both to Barracuda Central and to Barracuda Forensics & Incident Response where they can be investigated.

To report email as incorrectly delivered, select a message in the Message Log and click Report as Incorrectly Delivered above the message preview.

spam3.png

For more information, refer to Understanding the Message Log in the Barracuda Email Security Service documentation.

Last updated on