Entity
In LazyPhish we use entity as a base unit which group employees of a company typically under one management and security management. Your users and user groups are created within entity and all reporting is also tied to entity.
In most cases only one entity is the best way. We recommend to start with that.
When to use more than one entity?
If you are a group or concern of companies you can set each entity for each company in your group or concern. You can then evaluate the results for each entity separately.
Also if you are a big company with operations in many countries or if you have other independent sections or lines within your company under different management especially security management you can use a separate entities.
Testing Phishing Campaign (Campaign)
Campaign is an actual campaign performed on your users.
Each campaign is defined by:
Campaign Name defined during creation.
User Group on which the phishing campaign will be performed.
Campaign Template that will be used for the campaign.
Timeframe when the campaign will run selected during campaign creation.
Sending Mode how the blocks will be distributed during the campaign.
Awareness Mode if a redirect to awareness page will be used.
Campaigns can be created and managed in Campaigns section in LazyPhish App.
Campaign can have following statuses:
Scheduled - Campaign planned to start on selected start date.
Running - Campaign is currently running and testing.
Paused - Campaign is paused including testing.
Finished - Campaign successful finished.
Active Campaign is any campaign which is in status Scheduled, Running or Paused.
User Group
User group is a group of users in specific category e.g. Management, Accounting, Service, IT etc. You can use different Testing Phishing Campaign for different groups of users.
For example it make sense only to test employees with permission to approve invoice with Campaign Template that include Campaign Block simulating fake request for invoice approval.
User Groups can be created and managed in Users section in LazyPhish App.
User
User is employee of your company that will be target for the Testing Phishing Campaign. User is therefore meant as a user of systems and applications of your company.
Users can be created and managed in Users section in LazyPhish App.
User Email
User Email is Email Address of User.
Campaign Template
Campaign Templates are predefined templates that are used for Testing Phishing Campaign. These templates consists of a predefined set of Campaign Blocks in specific order. Each campaign template is defined by name, language and description of content, usage and purpose.
List of available campaign templates is in Campaign Templates page in LazyPhish App.
Campaign Template Block (Campaign Block)
Campaign Blocks are basic building blocks of campaign templates.
Each block consist of:
Name
Description
Email Template
Landing Page
List and details of campaign blocks that are included in particular templates can be checked by clicking on cog button in actions when on campaign templates overview page.
For each block you can see the details and you can select preview of Email template and Landing page. You can also use the paper plan button to send a testing version of the block to your email.
Sending Mode
Sending mode is a mode in which the campaign blocks are combined and scheduled during the campaign. There are two modes available:
Randomised (Recommended) - Campaign Blocks are distributed randomly during the campaign for random batches of user. This ensures that users can not share easily their experience with phishing they recently received. We believe that this approach is more effective and reporting is more accurate.
Block by Block - Campaign Blocks are distributed in order as they are presented in the campaign template overview. Blocks are performed one by one in waves.
Domain (Domain Name)
Domain Name identifies a specific network domain of a specific company.
For example in email:
“lazyphish.com” is the Domain Name.
Domain Validation
As a security measure in LazyPhish we allow you to start the testing phishing campaign only to emails within a domain you own. Therefore before we allow you to start a campaign you must validate the domain.
Domains can be validated in Domains section in LazyPhish App.
Please note that list of domains is automatically derived from list of uploaded users and associated emails.
Add Comment