Question 1

Creating Phishing User Groups

Accepted Answer

Creating User Groups for Phishing Simulations

One of the most effective ways to reduce the risk of infostealer infections is to proactively train employees through simulated phishing campaigns. Selki’s User Groups module helps you organize recipients for these simulations and assess how well your teams detect phishing attempts.

This guide walks you through how to create, manage, and populate User Groups for simulation campaigns.

Phishing User Groups

What Are User Groups?

User Groups are customizable collections of employees you want to include in your phishing awareness training. Groups can be organized by department, region, job function, or any structure that fits your organization. This is especially useful for:

Targeted phishing simulations
Segmenting high-risk teams
Tracking simulation performance by group

How to Create a User Group

Go to User Groups

Navigate to the User Groups section in the left-hand menu. You’ll see an overview of existing groups, including:

Group name
Number of members
Size classification (e.g., Small)
Security level (e.g., Standard)
Status (e.g., Active) Click ➕ Create Group to start a new group.

Fill Out Group Info

In the “Create New Group” window:

Group Name

Give your group a clear, descriptive name (e.g., Engineering Business Unit, Finance Department)

Add M

Question 2

Selki Dashboard

Accepted Answer

Selki Security Dashboard – User Guide

Overview

The Security Dashboard provides a real-time overview of your organization’s security posture in Selki. It consolidates key metrics—such as active threats, watcher health, vulnerabilities, and security-awareness results—into a single page so you can quickly assess risk and take action. The dashboard is currently marked Beta, so you may encounter minor changes as the feature evolves.

Getting Started

Log in to Selki

Navigate to dashboard.selki.io in your browser and enter your login credentials. Once authenticated, you will land on the default Threats page.

Open the Dashboard

Click the dashboard icon in the left-hand navigation bar (under the Monitoring section). This opens the Security Dashboard:

The Selki Dashboard

Tip: If you don’t see the navigation labels, hover over the icons or click the menu button to expand the full menu.

Dashboard Layout

Summary Cards

At the top of the page you’ll see four colored cards showing high-level metrics. Each card is clickable and will take you to the corresponding detailed view.

| Card | Description | What it Means | | ---- | | Active Threats | Displays the number of threats that require immediate attention. Shows current vs. total threats. | Click this card to open the Threats page to investiga

Question 3

Filtering Threats

Accepted Answer

Filtering Threats

The threats table can quickly fill up as Selki is ingesting millions of records per day. The more watchers you have the more threats will be uncovered. Use the filter to find exactly what you're looking for.

The filter has eight sections:

Watcher - The domain(s) you are monitoring
URL - The URL that was accessed by the compromised credential
Domain - The website where the compromised credential was found
Username - The account holders' username
Email - The account holders' email address
Password - The password used to access the account
IP Address - The IP address of the device used to log into the domain
Family - The infostealer family

Selecting one of the above filter allows you to find the data you need by selecting a "where" statement. For each filter, you can select the following "where" statement:

Watcher - Matches, Does Not Match all domains
URL - Contains, Does Not Contain, Is Exactly, Starts With, Ends With: Enter desired text
Domain - Contains, Does Not Contain, Is Exactly, Starts With, Ends With: Enter desired text
Username - Contains, Does Not Contain, Is Exactly, Starts With, Ends With: Enter desired text
Email - Contains, Does Not Contain, Is Exactly, Starts With, Ends With: Enter desired text
Password - Contains, Does Not Contain, Is Exactly, Starts With, Ends With: Enter desired text
IP Address - Contains, Does Not Contain, Is Exactly, Starts With, Ends With: Enter desired text
Family - Contains, Does Not

Question 4

Vulnerability Issues

Accepted Answer

Understanding the Vulnerabilities Page

The Vulnerabilities page is your centralized dashboard for tracking, assessing, and responding to security issues discovered through vulnerability scans.

This guide walks you through the main page layout and how to drill into individual issues for remediation guidance.

Main Vulnerabilities Dashboard

This page provides a real-time overview of all detected vulnerabilities, filtered by severity, status, and other relevant fields.

Vulnerability Issues

Key Features:

1. Issues List

Use this section to:

Toggle between Open Issues and Closed Issues
Filter by Severity levels:
- 🔴 Critical
- 🔶 High
- 🟠 Medium
- 🟡 Low
- 🔵 Log Each category shows a badge with the number of matching issues.

2. Search & Sort

At the top, use the search bar to filter by:

Issue name
Severity
Status
Date You can also click on column headers (e.g., Score, QoD, Observed At) to sort the list.

3. Issue Table

Each row includes:

Summary: Name of the vulnerability (clickable to view details)
Status: Open or Closed
Severity: From Log to Critical
Score: Often based on CVSS (0–10 scale)
QoD: Quality of Detection (how confident the system is)
Observed At: When the issue was detected

Question 5

The Threats Table

Accepted Answer

Selki Threat Management System - Infostealer Detection

Overview

The Threat Management System provides comprehensive monitoring and detection of infostealer malware threats that may have compromised user credentials. This system helps organizations identify both internal employee compromises and external customer credential breaches through automated collection and analysis of infostealer logs.

Understanding the Threats List Interface

Main Dashboard

The Threats List dashboard displays all detected infostealer threats in a centralized table format. Key features include:

Active Threats: Currently open threats requiring attention (shown with count)
Closed Threats: Previously resolved threats that have been mitigated
Search Functionality: Full-text search across all threat data
Filtering Options: Filter by description, type, user, password, and collection date

Threat Categories by Type

Threats are categorized into two main types:

Employees: Internal staff credentials that have been compromised
Customers: External customer credentials detected in infostealer logs
Others: Miscellaneous credential types

The Threats Table

| Uncover the infected username and password by hovering your mouse cursor over each field.

Security Features

For security and privacy protection:

User and Password columns are blurred by default

Question 6

Analyzing Vulnerability Details

Accepted Answer

Viewing Vulnerability Issues

Viewing Issue Details

Clicking on an issue opens a detailed view:

Vulnerability Details

Detail Sections

Summary

A short description of the issue and its impact.

Severity & Score

Severity is determined by Selki's security analysts.
Score reflects the technical impact (e.g., 9.8 is considered very high risk).

Solution

Clear remediation guidance (e.g., update to a specific version).

Method of Detection

Explains how the issue was discovered, including OID references and version checks.

Insights Tab

Lists the specific CVE IDs associated with the issue, along with brief descriptions of each vulnerability. These are standardized IDs used globally to track known security flaws.

Affected Assets Table (Bottom Section)

Each row shows:

Status
Hostname
IP address
Port
CVSS Score
QoD
Observation Timestamp
Watcher (who’s responsible or monitoring this issue) You can also search or sort affected hosts using the bottom filter bar.

Closing an Issue

At the bottom of the issue details, check the box next to the status and two options appear to close or re-open an issue:

Best Practices

Prioritize high and critical severity issues w

Frequently Read Articles

Browse All Categories