← soc analyst

Phishing & Email Threat Analysis

intermediate 4h

Analyze any submitted email to classify and triage phishing, BEC, AiTM, and spear-phishing — and write a containment ticket that security engineering can act on immediately.

After this module you will

  • › Parse email headers and interpret SPF, DKIM, and DMARC results
  • › Classify any suspicious email into the correct phishing taxonomy category
  • › Safely analyze URLs and attachments to extract indicators
  • › Investigate BEC and AiTM phishing end-to-end including identity correlation
  • › Write a complete containment ticket from first report to remediation

Lessons

1 Anatomy of an Email — Headers, Authentication, and the Received Chain
25 min
2 The Phishing Taxonomy — From Generic to AiTM
20 min
3 URL & Attachment Analysis — From Click to Indicator
25 min
4 BEC & AiTM In Depth — From Delivery to Dwell
30 min
5 Writing the Containment Ticket — From Report to Remediation
25 min

Module Quiz

Test your knowledge before moving on.

Take Quiz →