Skip to content

Commit 96e0561

Browse files
authored
Update attack-simulation-training-insights.md
Added some details on repeat offender report.
1 parent b75dcdf commit 96e0561

File tree

1 file changed

+10
-6
lines changed

1 file changed

+10
-6
lines changed

defender-office-365/attack-simulation-training-insights.md

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -220,12 +220,16 @@ If you hover over a data point in the chart, the actual values are shown.
220220

221221
The details table below the chart shows the following information. You can sort the information by clicking on an available column header. Select :::image type="icon" source="media/m365-cc-sc-customize-icon.png" border="false"::: **Customize columns** to change the columns that are shown. By default, all available columns are selected.
222222

223-
- **User**
224-
- **Simulation types**
225-
- **Simulations**
226-
- **Email address**
227-
- **Last repeat count**
228-
- **Repeat offenses**
223+
- **User**: Name of the user
224+
- **Simulation types**: Type of simulations where the user was involved
225+
- **Simulations**: Name of simulations where the user was involved
226+
- **Email address**: Email address of the user
227+
- **Latest repeat count**: This is the latest count of compromises for users categorized as repeat offender. As an example, if the repeat offender’s threshold is set to 3, and a user has been compromised in 3 consecutive simulations, then the latest repeat count is 3. If the user has been compromised in 4 consecutive simulations, then the latest repeat count is 4. If the user has been compromised in 2 consecutive simulations, then this value shows N/A. The latest repeat count sets to 0 (N/A), every time a repeat offender flag is reset (meaning the user passes a simulation).
228+
- **Repeat offences**: This will include the number of times a user has been classified as a repeat offender. As an example, if a user:
229+
- Was classified as a repeat offender in first few simulations (they were compromised 3 consecutive times, where repeat offender threshold is 2)
230+
- Was classified as ‘clean’ after passing a simulation
231+
- Was classified as a repeat offender in the next few simulations (they were compromised 4 consecutive times, where repeat offender threshold is 2)
232+
In such a case, the number of repeat offences would be set to 2. The count updates every time a user is considered a repeat offender.
229233
- **Last simulation name**
230234
- **Last simulation result**
231235
- **Last training assigned**

0 commit comments

Comments
 (0)