Response and Remediation

Classification

Material makes classification suggestions and describes reasons to help you classify the issue. If you enable User Report Auto Classification, Material will also automatically classify and remediate based on your settings. Learn more here.

User Report Auto Classification

After analyzing the analysis provided in the issue detail view, you can also re-classify the issue as safe, malicious, or spam.

Classification

Responses based on classifications trigger after you save your classification.

Manual Response

Initial remediation is determined by default settings. Once you've analyzed the issue, if you want to update the remediation you can do that directly in the issue detail view.

Click into any of the blocks to edit content, block type, etc. Once you save, these remediations are applied to any future issue message that's sent to a user.

Response

If you want to also send this response to users who received a response when the issue wasn't classified yet, check Also send to previous reporters.

Learn more about Auto-Remediation and Response, including setting defaults, here.

Customizing the response content in the issue does not update the template that was applied by default. See how to create a template for more information.

Block a sender

You can block a sender directly from the message details in an issue to prevent them or their associated domain from delivering messages into inboxes.

1. Begin in a specific issue.

2. In the message details, click the Sender Address.

3. From the quick action menu, click Block.

Click the sender, then click Trust

1. Choose to block just this sender's email address, or their entire domain:

Block one sender or any sender in their domain

1. A custom detection is created deleting messages from that sender. Click the pop-up in the bottom left corner to view the detection (or from Detections, search for the domain to find the detection).

Sender blocked successfully

To unblock a sender, archive the detection.

It's possible to both Trust and Block a sender from the quick actions menu. If both actions are taken, we defer to the Trusted Entity and the sender is not blocked, regardless of existing or future detections.