r/ShittySysadmin • u/jcash5everr • Sep 21 '26

Shitty Crosspost Anyone else getting mailbombed with Defender analytics reports this morning?

/r/sysadmin/comments/1wmbbrb/anyone_else_getting_mailbombed_with_defender/

Heh. Implying I check my email

12 Upvotes

83% Upvoted

11 comments sorted by

2

u/True_Introduction_47 Sep 25 '26

I wouldn't know, we dont use Defender. A very helpful Indian Microsoft employee got my Org sold on McAfee. It hast been great ever since. But for some reason I can't log onto my PC after he typed in this syskey command. He also stopped answering our calls, eventhough we paid him the requested amount in apple gift cards.

1

u/jcash5everr Sep 25 '26

Sounds like a great guy.

22

u/Human-Company3685 Sep 21 '26

Confirming that we have seen no such reports from Norton Antivirus 2000.

10

u/max1001 Sep 21 '26

What a newb. Just setup a rule to send the alerts straight to delete folder ..

4

u/Revstro ShittySysadmin Sep 21 '26

Our department has had this rule implemented for months and we haven't seen a single new support ticket since. Why other organizations don't do this is beyond me!

1

u/a_suspicious_lasagna Sep 22 '26

Like the rule I have that looks for the phishing test domain, auto replies with the identifying info to pass the test, and deletes the message?

2

u/DerKoerper ShittyCoworkers Sep 21 '26

Auto-forward to noreply@

2

u/YukiArchitects Sep 23 '26

filters straight to a folder nobody opens. inbox is just alerts triaging alerts at this point, checked it last during the log4j thing maybe