Campaign Mode: Because Your SOC Team Has a Life

KnowBe4 Team | Apr 7, 2026

In the world of cybersecurity, busy is an understatement. SOC teams are often drowning in a sea of repetitive alerts. Looking at the same threat or graymail spread across 50 pages of logs isn't just tedious, it’s a drain on your most valuable resource: time.

That is why we are introducing Campaign Mode for KnowBe4 Defend. It’s time to stop chasing individual emails and start managing at scale.

Collapse and Conquer

If you’ve ever felt the pain of clicking through hundreds of identical phishing attempts or spam and graymail, this update is for you. Campaign Mode allows you to group related messages into a single line item.

Key features:

  • Group and Remediate: Instead of clicking through false positives over multiple rows and pages, admins can toggle on Campaign Mode to implement campaign-based grouping of related threats, spam and graymail.
  • Proven Productivity Gains: View exactly how much time Defend is saving your organization by auto-sorting the noise.

Visual Intelligence via Heat Maps and Axis Graphs

To stay in the driver’s seat, you need to know when the road is getting dangerous and how AI automation helps you stay focused on mission-critical activities.

Key features:

    • Spot the Patterns: New Dangerous and Suspicious heat map that identifies the specific days and times your organization is most likely to be targeted by phishing attacks.
    • Enhanced Visualization: A Spam and Graymail graph with a new axis shows admins the frequency of graymail or spam emails received over a specific period.
    • Strategic Defense: By knowing your peak threat times, you can better allocate resources to stay ahead of the curve.

Why This Matters

Even in the age of AI, your SOC team needs the tools to manage threats that require human attention efficiently. Campaign Mode removes the manual friction, allowing your experts to focus on high-level tasks and strategy rather than repetitive clicking.

Ready to reclaim your time? Campaign Mode is rolling out now to all Defend admins. The new visual intelligence will automatically appear on your dashboard. For the message grouping, simply toggle Campaign Mode on in your Recent Emails page to start managing threats more efficiently.


See KnowBe4 Defend™ in Action

Learn how Defend™ strategically enhances Microsoft 365's native security to catch the threats Secure Email Gateways (SEGs) miss.

Request a Demo



Get the latest insights, trends and security news. Subscribe to CyberheistNews.