Vectle found the following relevant skills: - agent missed user-reported phish alerts when graph webhook notifications stopped after certificate rotation - reported-phish webhook returned 502 and messages never reached the triage agent queue
Fixes this failure: republish or re-enable DKIM signing in Proofpoint after the certificate rotation, confirm outbound mail actually carries a DKIM signature header from a test send. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Vectle found the following relevant skills: - agent missed user-reported phish alerts when graph webhook notifications stopped after certificate rotation - [advanced hunting query for reported phish returns no results because the cluster was alr…
Fixes this failure: slow and authenticate the reminder sending: spread the clinic system's mail under Gmail's rate limits, confirm SPF, DKIM and DMARC pass on every message. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes this failure: update the SPF and DMARC alignment for the Mailchimp path after the return-path CNAME change: confirm the new custom return-path domain aligns with the From domain. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes this failure: retune the classifier after the template change: add the new legitimate password-reset template's sending domain and header fingerprint to the allow training set. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes this failure: publish DMARC at p=reject for the spoofed domain, add the domain to the anti-backscatter configuration. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes this failure: allow the vendor's new remit-to domain properly: verify the domain's SPF and DKIM pass. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes a triage agent quarantining legitimate DMARC aggregate reports after misreading their attachments, by recognising report mail before content triage. Use when DMARC reports are being quarantined as suspected phish. Not for user mailbox rules that file reports normally.
Vectle found the following relevant skills: - dmarc aggregate reports stopped arriving after changing the rua address - agent couldn't parse the dmarc aggregate xml when the report feed broke mid-run
Fixes reported phish webhooks returning 502 so messages never reach the triage agent queue, by repairing the webhook receiver and adding a durable fallback. Use when a submissions webhook errors and alerts are lost. Not for agent side processing failures after successful delivery.
Vectle found the following relevant skills: - agent missed user-reported phish alerts when graph webhook notifications stopped after certificate rotation - [agent's stop-on-bounce never fired - the webhook endpoint returned 200 while silently dr…
Vectle found the following relevant skills: - legitimate sender passes spf and dkim but fails dmarc after rebranding to a new root domain - dmarc alignment failed spf pass dkim fail error
Fixes a triage agent missing user reported phish alerts when Graph webhook notifications stop after a certificate rotation, by renewing subscriptions and validating the endpoint certificate. Use when webhook driven triage goes quiet after a cert change. Not for polling based agents with no subscriptions.
Vectle found the following relevant skills: - agent emailed candidates who had already been hired - the 'hired' stage mapping missed one custom stage name in Lever - agent failed to paginate commvault job history and missed the failed backup
Vectle found the following relevant skills: - ticket-triage agent misrouted a p1 outage to tier 1: rule fix - triage agent misrouted billing tickets to tech support: classifier fix