Detections

Through a combination of algorithms and human threat detection, Material does the bulk of the work for you in detecting suspicious emails, but there are like scenarios unique to your organization.

You have control over where malicious messages are sent, how you communicate with your employees about suspected phishing, messages that shouldn't create issues, etc.

The pre-built, Material default settings are effective in most situations. Customization is meant to help you tweak as needed, and to align closely with your security strategy.

To account for your custom scenarios and issue creation preferences, configure default detection settings in these areas:

Detection Type	Options
Material Detections	No configuration needed, enabled by default
User Reporting Methods	Choose how users report suspicious messages
Email Provider Alerts	Choose which Gmail alerts you would like to ingest from the Google Workspace Alert Center.
Custom Detections	If something isn't already covered in another detection, define your own criteria for flagging messages.
VIP Impersonation	Create known aliases, like a CEO or other frequently impersonated team member, and avoid triggering account protection erroneously
Trusted Entities	Prevent specific use cases from being added to issues after detection

After you've determined your detection settings, review the default responses and remediations for each of these detection types to confirm you're happy with them.

---

Navigate to Settings

Each of the above settings' individual details are described in the guides in this section. You need an admin, settings admin, or analyst role to edit them.

To navigate to Email Threats settings, from the left navigation expand Email Threats, expand Settings, then click Material Detection, Email Provider Alerts, or Issue Triage. For user reporting settings, from the left navigation expand User Reports, then click Settings.

Note: If your role is a Tenant level role, you can only update settings for your assigned tenant. Global roles can update Global settings. Learn more here.

Email Threats settings