New playbooks for the automation of phishing response - Game changers.

preview_player
Показать описание
Incident response teams are faced with an ever-increasing number of security incidents to respond to.

In these times of a global pandemic, cybercriminals have been employing the tactic of sending phishing emails that appear to come from trusted brands (like CDC and WHO) and it has thus become mission-critical for security analysts to accelerate the elimination of false positives to get to the actual threats fast and eliminate them with comprehensive and accurate incident response procedures.​

Two specialized playbook automations are now being shared for customers to support this cause and accelerate the incident triage stage for Security Analysts.​

​The repeat detection playbook offers a new approach to determine if incident response has been provided on an exact or similar phishing report in the past and enable Security Analysts to work the new report in a similar way.​

​The email domain spoof detection playbook helps alert analysts to the possibility of a look-alike domain in the phisher’s email address and gets the triage going.​

For more information and questions:
Рекомендации по теме