Phishing analysis and prevention

Analysing and defending against phishing emails. Investigating real-world phishing attempts using a variety of techniques.

Analysis tools

• Introduction
• Email header analysis
• Email body analysis
• Malware sandboxes
• PhishTool
• Case 1
• Case 2
• Case 3

Prevention

• Introduction
• Smarter mail servers
• Signatures and encryption
• Patterns for NTA
• SMTP and C&C communication
• User training

Challenges

• Introduction
• The Greenholt Phish