Pistachio's vision is built around seamlessness. We want Pistachio to fit into your life as if it is not even there. A big part of that is making it easy to set up and launch Pistachio within your organization. We never wanted to be the type of company that had to write an onboarding guide.
Unfortunately, the Pistachio Reporting Button requires a bit of additional work, so here we are writing an onboarding guide. But don't worry, we'll make this as painless as possible. If you follow the steps below, you'll be good to go in under ten minutes. And if you get stuck, let us know so we can improve this guide for others.
In order to complete the steps in this guide, you will need to be a global admin within your Microsoft Entra tenant. If you are unsure of whether you have global admin permissions, you should contact your IT department for assistance.
Step 1: Select Reporting Destination
If a user reports a phishing email that is not a Pistachio simulation, that email will get sent to a mailbox of your choosing. You decide which mailbox we send reported emails to directly in Microsoft.
To do that, go to the user reported settings in Microsoft Defender.
- Ensure the box next to Monitor reported messages in Outlook is checked. Then, select Use a non-Microsoft add-in button.
- Scroll down to where it says Reported message destinations, and under that there is a dropdown box that says Send reported messages to. Click that, and select My reporting mailbox only.
- Ensure the box next to Monitor reported messages in Microsoft Teams is checked.
- Immediately below that, there is a box that says Add an exchange online mailbox to send reported messages to:. There, you want to write the name of the email address that you want us to send reported emails to. We recommend that you create a mailbox specifically for this purpose, something like reported-emails@your-company.com, but it is entirely up to you.
- Last, scroll down to where it says Customize sender and branding. Check the box that says Specify a Microsoft 365 mailbox to use as the From address of email notifications. In the box below, write the same email address you set above for receiving reported emails.[1]
Click Save, and you're all done on this page.
Step 2: Distribute the Button
The next step is to distribute the Pistachio Reporting Button to everyone in your organization.
First, go to the integrated apps section of your Microsoft 365 admin center. Above the list of apps, you will see a button on the left that says Get apps. Click that and a box will appear.
- In the top right, search for "Pistachio".
- Select Pistachio Report Button and click Get it now.
- A box will pop up asking you to confirm. Again, click Get it now.
You will then be asked to add users to the app.
- Under Assign users select Specific users/groups.
- Click the search box, search pistachio-standard, and click the group that appears. Warning: If pistachio-standard is nested inside a different group, you need to select that group instead.[2]
- Unselect the checkbox that says Send email notification to assigned users.
- Click Next.
You will then be shown a page asking you to accept the permissions the app requires to function.
- Click the box that says Accept permissions.
- A popup window will appear asking you to log in. Log in with the Microsoft account that has Global Admin permissions.
- The permissions page will then appear. Review the permissions and click Accept.
- That window will close. On the original page, click Next.
- Click Finish deployment.
Once the page says that the deployment is completed, click Done, and that's it!
What's Next?
That's all you need to do! However, at this point you might be a bit confused: You've followed all of the steps, and yet you can't find the Pistachio Reporting Button anywhere. That's normal. Microsoft is slow, and it can take up to 7 days before the button will appear. Rest easy, though; if you followed the steps above, it will work in time.
Once people start to use the Pistachio Reporting Button, all reported emails will appear in Microsoft Defender under the Email Submissions tab. Of course, the emails will also be sent directly to the mailbox you configured in step 1.
As a final point, it is important to note that people won't start using the Pistachio reporting button unless you tell them to. We will do our best to get people started, but there's no replacement for good internal communication. It is important that you tell your employees about this new reporting button, and encourage them to start using it.