Phin Security

CSV Reporting (With Examples!)

Phin's CSV Reporting feature allows admins to enable and receive bundled weekly or monthly CSV and PDF reports detailing 12 months of user interactions with simulated phishing emails—including metadata like email subject, sender, timestamps, IP addresses, and user agents—and training course completion data, with phishing click reports excluding false positives and requiring a valid Report Viewer address for email delivery.

Overview

Phin offers the optional delivery of raw CSV data for admins to discover and understand trends in how their users are completing training and how they interact with simulated phishing emails.

Phin Sample Phishing Clicks CSV Report

A sample CSV report is available for download, which demonstrates the format and content of phishing clicks data.

Phin Sample Training Data CSV Report

This section is to be determined (TBD).

Turning on CSV Delivery

To enable the generation and delivery of CSV reports:

  1. 1.Navigate to the company's "Reporting" page.
  2. 2.Access the reporting settings window.
  3. 3.Toggle the delivery of weekly or monthly CSV reports for either training data or phishing clicks data.

Note:

  • PDF reports must be enabled in order to receive CSV reports, as they are bundled together.
  • A valid Report Viewer address is required for the reports to be emailed.

Report Data

Phishing Click Reports

  • Look back 12 months from the send date.
  • Provide a complete overview of all valid clicks that users have made on simulated phishing emails.
  • Click data includes:
    • The user to whom the phishing simulation was sent
    • The campaign that the phishing simulation was a part of
    • Metadata about the specific phishing simulation email, including:
      • Email Subject
      • Email From Address
      • Sent Date & Time
      • Clicked Date & Time
      • The IP address of each valid click on the phishing email
      • User Agent String

Training Data Reports

  • Also look back 12 months from the send date.
  • Provide essential data for all users who were assigned courses.
  • Data includes:
    • Name
    • Email
    • Course Name
    • Assigned Date
    • Completed Date, if applicable
    • Course Status

Limitations

  • CSV reports of phishing click data only provide records for valid clicks (i.e., clicks not marked as false positives by admins).