Isn't AI wonderful:
Me to Google/Gemini: Tell me how to build an outlook rule that will move corporate test phishing emails to a separate folder.
To move corporate test phishing emails to a separate folder, you must build a custom Outlook rule based on a unique message header attribute or simulation domain used by your IT department. Because phishing simulation tools intentionally randomize their sender names and subject lines to mimic real attacks, standard rules filtering by sender name or subject line will quickly fail.Step 1: Identify the Simulation IndicatorBefore creating the rule, you need to find a static identifier that your organization's testing vendor (like KnowBe4, PhishMe, or Infosec IQ) embeds into every test email.Open a previous corporate phishing test email.View the internet headers.In Classic Outlook, double-click to open the email, go to File > Properties, and look at the Internet headers box.In New Outlook / Web, click the three dots (...) on the email, select View > View message details.Look for a vendor-specific tag or the simulation domain. For example, KnowBe4 emails usually contain X-PHISHTEST or X-KB4- in the header.Step 2: Create the Phishing FolderRight-click your main Inbox folder on the left pane.Select New Folder.Name it something clear like Phishing Simulations.Step 3: Configure the Outlook RuleFor Classic Outlook (Desktop App)Go to the Home tab, click the Rules dropdown in the Move section, and select Manage Rules & Alerts.Click New Rule.Under Start from a blank rule, click Apply rule on messages I receive, then click Next.In the conditions list, check the box for with specific words in the message header.In the bottom Step 2 box, click the underlined "specific words" link.Type the vendor tag you found in Step 1 (e.g., X-PHISHTEST), click Add, and then click OK. Click Next.In the actions list, check move it to the specified folder.In the bottom Step 2 box, click the underlined "specified" link, select your new Phishing Simulations folder, and click OK. Click Next.Click Next again to bypass exceptions (unless you want to add any).Name your rule, check the box to Run this rule now on messages already in "Inbox", and click Finish.For New Outlook / Outlook on the WebClick the Gear icon (Settings) in the top right corner.Navigate to Mail > Rules.Click Add new rule and give it a name.Under Add a condition, select Message header includes.Enter your corporate vendor tag (e.g., X-PHISHTEST) in the text box.Under Add an action, select Move to and choose your Phishing Simulations folder.Check the box to Run rule now to clear existing emails, then click Save.If your IT department does not use custom headers, let me know. I can help you set up an alternative rule using hidden tracking domains or specific sender patterns instead.