Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Version 1.28

Filter Issues by Detection

You can now filter the issue list by detection type.

  1. From the left navigation, click Issues.

  2. Click the filter icon (three lines next to search).

  3. Choose Detection.

  4. Select the detection(s) to filter by.

the filter icon is three lines next to search, choose detection to filter by detection type
Issue Page

Note, this filter replaces the previous Detected By column.

Assign Issues

You can now assign issues to a specific employee to improve accountability and streamline your triage processes.

  1. From the issue detail view, click Assign to...

  2. Select an assignee from the list, or type their name in the box to search.

You can also use the shortcut ⌘K, then click Assign to... to choose an assignee.

from the issue detail view, a button with a person icon indicates the Assign to function
Issue Detail View

  • Assignees must have a role assigned in Material.

  • Deactivated users appear in the list as <username> (deactivated), while deleted users display as Unknown.

Email Threat Issues: Filter by Tactic or Analysis

Two new filters are available in Email Threats to help you focus your triage: Tactic and Analysis.

  1. From the left navigation, expand Issues then click Email Threats.

  2. Click the filter icon (three, cascading lines).

  3. Click Tactic or click Analysis, then choose one or more filter options to narrow the issue list.

the icon for an issue filter looks like three cascading lines
Email Threat Issue Filters

Employee Title in Issue Details

Understanding a person's role within a department can be helpful when trying to investigate the urgency or potential severity of an issue surfaced by Material. Employee Titles are now included in the Issue Detail View:

Issue Detail View

Issue titles sync from your Google Workspace or Microsoft 365 account.

Prebuilt Issue Views

Prebuilt views are now available for issues.

  • From the left navigation, expand Issues then click a view to quickly filter the issues list.

New views include:

  • User Reported Phishing Issues (User Reports)

  • Data Security

  • Data Governance

  • Configuration Management

issues navigation and quick views
Issues Navigation

New Message Search Operators

Message Search has three new operators:

  • recipients.has_personal_email

  • recipients.has_disposable_email

  • recipients.addresses

Shortcut to Copy Issue ID

When troubleshooting, you may be asked to share the issue with us and/or to send us the Issue ID. To copy this issue ID onto your clipboard, use the ⌘K shortcut then click Copy issue ID.

Copy issue ID is available from the ⌘K shortcut menu
⌘K opens shortcuts
copy issue id is located in the shortcut using ⌘K
Open Shortcuts with ⌘K

Updated Email Threat Issue ID Location

Email Threat Issue IDs (formerly known as Case IDs) are now present on the issue detail view:

Updated Email Threat Issue ID location

You can also copy an email threat issue ID using the shortcut described above.

Email Threat Detection Improvements

Material now also detects:

  • When a message spoofs Google using the default sender address and links to a Google Sites edit page

  • Messages that address users by email (instead of name)

  • Messages asking for sensitive info, sent from freshly minted domains, are now more likely to be flagged

  • Fake account alerts and email quarantine messages

HTML attachment detections were also refined to better catch embedded JavaScript.

PreviousVersion 1.29
NextVersion 1.27

Last updated

Was this helpful?