Phishing - How to Send Only Simulation Emails to the platform via the Microsoft button

Use these mail flow steps to prevent non-simulated reported emails from being forwarded to the platform via the Microsoft button for analysis and reporting:

To do this, please follow the steps below.

1. Please first complete integration steps  1 - 3.
2. Log in to the Microsoft 365 Admin Centre and open the Exchange Admin Centre.
3. Go to Mail Flow > Rules and edit the rule that you recently created.
4. Click the + button next to 'Apply this rule if' condition to create an AND condition.
5. Select 'The subject or body' and then select 'subject or body matches these text patterns' option.
6. Add this 'x-keepnet-tid: [0-9a-zA-Z]+' to the text field.
7.  Click the Save button to apply the changes.

Now, when an employee reports an email by using the Microsoft Phishing Reporter button, only simulation emails will be sent for analysis and reporting; any other emails will not be sent.