There was no record of compromised users even though users were compromised

Chidiebere Umezurike 5

Good Afternoon,

I ran an attack simulation with malware attachment and pushed to a specific set of people, I created a payload of my own and some of the users actually opened the attachment to view the content and also downloaded the attachment but it was not recorded on the platform.

Defender

What is the cause of this error?

Catherine Kyalo 655 Reputation points Microsoft Employee

2024-04-04T15:30:13.66+00:00
Hi @Chidiebere Umezurike

Was this a delay in reporting?

The users who are part of the simulation should not be part of an ongoing simulation. A user can be a part of only one simulation at a time.

The users might be using third-party mail clients or mobile devices to access their emails. Currently, Attack simulation training supports only Outlook clients.
Chidiebere Umezurike 5 Reputation points

2024-04-05T08:41:09.67+00:00

Good morning Catherine Kyalo, does this mean that users who use the outlook web won't be recorded just the users that use the Outlook app?

Share via

There was no record of compromised users even though users were compromised