domains / families / security / investigating-phishing-email-incident

investigating-phishing-email-incident

separate

'Investigates phishing email incidents from initial user report through

When to use

• A user reports a suspicious email via the phishing report button or helpdesk ticket
• Email security gateway flags a message that bypassed initial filters
• Automated detection identifies credential harvesting URLs or malicious attachments
• A phishing campaign targeting the organization requires scope assessment

When not to use

• spam or marketing emails without malicious intent

Skill page

Source