LUCY allows you to schedule a campaign. Those mechanisms allow you to build an intelligent phishing campaign with multiple rules, testing user awareness in different scenarios and also different time periods. This might keep the security awareness at a high level if users know that the company performs sample phishing tests on a small group of random users over a long period.
LUCY > 3.0 comes with scheduler rules and new with a scheduler plan that allows you to verify the existing rules. Please use the following configuration tutorial to setup your scheduler:
Step 1: Preparation. The scheduler uses the local time & time zone. Therefore, you should make sure, that you have set the correct time & time zone before working with scheduler rules.
Step 2: Add Recipients to your campaign (lets say you have 2 scenarios and 1 recipient group, and then add the 1 group to both scenarios, the 1 group then will get a separate message for each scenario). If you want to distribute your 1 recipient group over multiple scenarios (so a recipient will only get 1 message for one of the both scenarios), you need to click on the checkbox “distribute users over the selected scenarios”:
Step 3: Define scheduling rules.
The scheduler rules have the following options:
Step 4: Verify your scheduler settings. Once you build the rule(s) you can click scheduling plan and LUCY will show you which recipient will get a message when and with which scenario. This allows you to verify if the scheduler is configured as planed.
Step 5: Start your campaign. After configuring the scheduler you still need to click "START / REAL ATTACK". Lucy will then perform all the campaign based checks and send out the mails according to your scheduler settings.
If you want to specify a specific time frame between each mail you can use the scheduler calculator. Please enter the number of recipients, the desired gap between each email and the start time, then LUCY will automatically cerate your scheduling rule with the correct end date/time:
In LUCY > 3.3 you have the ability to create scheduling rules based on different time zones. If you specify a longer time range you can also ensure, that mails are not sent out on weekends by selecting the checkbox:
Initial position: lets assume you want to setup a phishing campaign that repeats for three month. You have 6 employees split into 3 groups and 3 attack scenarios. You want to split up the 3 attack scenarios among those 3 groups in a way, that every month, an employee just gets only 1 attack scenario. After 3 months, every employee should have received 3 unique attacks.
Solution A - One Shot:
[email protected] Scenario 1 08.2017 22:22:00 (Europe/Brussels) [email protected] Scenario 2 09.2017 22:07:00 (Europe/Brussels) [email protected] Scenario 3 10.2017 22:07:00 (Europe/Brussels)
The “problem” with this approach is, that LUCY will send all emails for scenario A in first month, all emails for scenario B in second month, etc. If you want more “randomisation”, you can use overlaying dates in your scheduling rules (e.g. rule 1 starts at day 1 from month 1 and ends on last day of month 3, rule 2 starts middle of month 1 and ends at middle of month 2, rule 3 starts at the beginning of month 2 and ends at the second month).
Solution B - 12 Repeating Rules: