Browser LabLD-CF-LAB-005Easy
Browser LabLD-CF-LAB-005Easy25 min
Two Emails, One Verdict Each
Two employees forwarded emails to Aurora's new 'report suspicious mail' address within an hour of each other. Triage both. One deserves an incident; treating the other as one would teach staff that reporting mail is a waste of time.
What you will be able to do
- Extract sender, reply-to and link indicators from headers.
- Separate a lookalike domain from the real one.
- Give each email its own verdict — including a benign one.
Incident TriageT1566.002 — Spearphishing Link
Sign in to start this lab.
Sign in