Riot in Darktrace

Riot sends phishing test emails. Without the correct configuration, some of these emails would not pass the Darktrace web filter, which would compromise your campaign statistics.

The following guide explains how to avoid this and ensure your test campaigns run smoothly.

Did you know? Unlike Riot, hackers would have no problem bypassing your spam filter by exploiting legitimate email servers, which Riot cannot afford to do.

Create a new model detection

1. Navigate to Detection > Models
2. New model > Global Model

1. Name: Riot
2. Description: tryriot.com
3. Select model is active + automatic actions + applies to outbound
4. Add a new components input (blue circle) and drag it in the model logic

1. Set connection + IP Address

1. Positive Equals: 159.135.234.25

1. Model actions: Do not hold or alter

1. Save