Phishing Response

Dedicated phishing analysts in our Security Operations Center investigate submitted phishing emails from your users or email protection platforms. Throughout the course of the investigation our analysts identify the tactics, techniques, and procedures leveraged in the attempted attack while documenting their investigative process and findings

The intelligence gathered through the investigation is actioned by our analysts through a hunting exercise in your environment. The analysts take the indicators of compromise identified through the analysis of the phishing email, as well as any additional indicators identified through intelligence correlation, and hunt through your environment to detect other potentially successful attacks

When the investigation and threat hunt is complete, analysts provide both tactical and strategic recommendations designed to help you reduce risk and improve your security controls and detection capabilities. You can expect new or tuned detections, mitigation suggestions, and remediation guidance.

We’ll regularly provide you with metrics that are important to understand your security posture and risks. These include the most targeted users in your organization; the types of attacks you’re being targeted by; where attacks align on the Cyber Kill Chain and MITRE ATT&CK frameworks; and trends over time so you can see how our tactical and strategic recommendations drive security maturity.