HRM Campaign Event

This webhook is fired when a Human Risk Management (HRM) phishing simulation campaign engagement event is recorded. Events include attack delivery (email_sent), target interactions (email_opened, link_visited, data_submitted), training outcomes (training_accessed, quiz_passed, quiz_failed), reporting (email_reported), voice call results (call_answered, call_missed), and voice behavior analysis labels (refusal, disclosure_full, security_escalation, etc.).

Payload

Information about the HRM campaign engagement event, including the action type, campaign and user identifiers, and optional context like attack vector and device type. For Splunk integrations, this payload is wrapped in a Splunk HEC envelope with sourcetype "doppel_hrm_events".

Top-level webhook payload, containing the event type and the event-specific payload.

string
enum
required

The type of event that occurred.

Allowed:
date-time
required

Timestamp of when the event was recorded.

payload
object
required

Payload type for the "HRM Event" webhook. Fired when a phishing simulation campaign engagement event is recorded (e.g., a target opens an attack email, clicks a link, submits data, completes training, or answers a vishing call).

Responses
201

Webhook notification received successfully, and acted upon synchronously.

202

Webhook notification received successfully, but will be acted upon asynchronously.

400

Invalid payload received.

LoadingLoading…