Overview
KnowBe4 Defend provides advanced detection capabilities that reduce the risks associated with email phishing attacks. KnowBe4 Defend evaluates context, relationships, and message content before the email arrives in your mailbox.
Environment
University Outlook account
Question
What are the color banners at the top of my emails?
Answer

Blue banner: Blue banners are just informative, and it is not associated with a threat being detected. In most cases, no action is required for a blue banner.
Amber banner: Amber banners indicate that suspicious elements have been detected and show indications of phishing or impersonation. Exercise caution when responding or clicking on links and ensure you respond to the real sender.
Red banner: Red banners indicate that an email shows very strong signs of phishing. Ideally, the email should be deleted, at the very least extreme caution should be used if responding, taking suggested action, or clicking on links.
Additional Info
Graymail is a non-malicious bulk email sent from legitimate sources. Examples of graymail include newsletters, announcements, or advertisements that users may have previously opted-in for. Defend can detect and action a graymail with the following functionality:
- Graymail banners
- Moving mail to a _Graymail folder
- Report as Graymail/ not as Graymail buttons on the email summary page
To locate Graymail in Outloook on your mobile device, follow the instructions below.
- Open your Outlook app on your device and locate your Inbox with the right facing arrow.

- Once you click this arrow, this is where you will find your Graymail folder.
