❶ What is Audit mode?
Audit mode is a Slash protection mode that analyses all your employees' incoming emails without taking any action:
no banner is displayed in emails;
no email is moved;
your employees see nothing: nothing changes in their mailbox.
On the admin side, you can still see what Slash detects: malicious emails arrive in Inbox, and you have statistics on Slash's detections.
❷ When should you use Audit mode?
Audit mode is designed to test Slash without disrupting your employees. As they see no change, no internal communication is needed before you start: the evaluation can begin sooner.
For example, it lets you measure what Slash would have detected in your mailboxes before you decide to display banners to your employees.
❸ Audit or Warning: what is the difference?
Warning mode is the mode that displays banners. Here is how the two differ:
| Audit | Warning |
Analysis of incoming emails | Yes | Yes |
Banner in the email | No | Yes, on every detected email (malicious or suspicious) |
Email moved or blocked | No | No |
Visible to employees | No | Yes, through the banners |
Visible to admins | Malicious emails in Inbox and detection statistics | Detected emails in Inbox |
❹ Enabling Audit mode
The protection mode is chosen when you install Slash. For a step-by-step installation, see the article 2️⃣ How to install detection banners (Slash).
When you reach that choice, select Audit mode [TO CHECK: exact label of the option in the UI, and its location in the installation screen].
💡 Prerequisites: the installation prerequisites for Slash are the same as with the other modes (Inbox module installed, workforce synchronised, Slash feature enabled for your workspace).
👍 Good to know: you can switch from Audit mode to Warning mode from Slash's settings whenever you wish.
Key takeaways
Audit mode analyses all incoming emails but displays no banner and moves no email.
Your employees see nothing: no internal communication is needed to test Slash.
Admins find the malicious emails in Inbox and the statistics on Slash's detections.
The mode is chosen at installation, among Slash's protection modes.