duo-labs / isthislegit

Dashboard to collect, analyze, and respond to reported phishing emails.
BSD 3-Clause "New" or "Revised" License
286 stars 51 forks source link

Feature request: configurable questions during reporting #35

Open paddycarver opened 5 years ago

paddycarver commented 5 years ago

We'd love to have the ability to ask users questions during reporting, and then have those responses made available to match against as rules. I envision it as a new model, ReportQuestion, with an ID, a value, and an order. Or it could be configured as part of the chrome extension, as part of the settings pushed out by the administrator. When the report button is clicked, we could have the user select e.g. whether they clicked any links, downloaded any files, or typed their password in anywhere. Based on that, we could automatically route the report to the appropriate team to react to the situation.

This would basically require three changes:

We could go over the top with this, and build in an entire form builder, or we could just let the user specify HTML form fields on their own, and inject those into the popover when reporting, and have the report JSON include a "form" field that pulls in any named input in the popover and includes it. There are a lot of ways to go with this. For our use case right now, I think we've only wanted boolean responses, but I can imagine others wanting something else.

Is this something you'd be interested in adding?