1️⃣ Introduction
Riot sends phishing simulation emails.
If your Darktrace solution is not properly configured, some of these emails may be blocked by filters, which could distort your campaign statistics.
Here’s how to allow Riot’s IPs and ensure your test campaigns run smoothly.
2️⃣ Definition
Darktrace is an AI-based detection solution that analyzes email traffic and can block suspicious messages.
Without proper configuration, your Riot simulation emails might be mistakenly filtered.
3️⃣ Configuration steps
Go to Detection > Models
Click New model > Global Model
Fill in the following information:
Name: Riot
Description: tryriot.com
Select Model is active + Automatic actions + Applies to outbound
Add a new component input (blue circle) and drag it into the model logic
Set the following parameter:
Connection + IP Address
Positive Equals: 159.135.234.25
Under Model actions, select Do not hold or alter
Click Save