Knowledge Base
Find answers to common questions and learn more about our services
CEO fraud / gift card scams user training blurb
## Overview
Short training blurb—paste into newsletter or Teams announcement.
## Blurb
“Executives will never email you to buy gift cards urgently. V...
email-security-phishing-response
msp
seed-library
Apr 17, 2024
Read more →
Attachment sandbox false negatives communication
## Overview
When sandbox misses malware, clients blame MSP stack—be factual about limits.
## Explain
Deterministic evasion, password zips with delaye...
email-security-phishing-response
msp
seed-library
Apr 16, 2024
Read more →
User-reported phishing workflow
## Overview
Reporting add-ins turn users into sensors—reward good reports, close loop fast.
## Flow
User reports → SOAR triage bucket → auto-duplicat...
email-security-phishing-response
msp
seed-library
Apr 15, 2024
Read more →
Mailbox forwarding rules audit script idea
## Overview
Silent external forwards exfiltrate mail post-BEC. Audit regularly—even if UI-only initially.
## What to look for
`ForwardingSMTPAddress`...
email-security-phishing-response
msp
seed-library
Apr 14, 2024
Read more →
Safe sender allowlisting risks
## Overview
Allow lists bypass helpful filtering—attackers abuse compromised trusted senders.
## Policy
Require VP+ approval for domain allow; time-b...
email-security-phishing-response
msp
seed-library
Apr 13, 2024
Read more →
DMARC reporting interpretation for clients
## Overview
DMARC aggregate reports (RUA) show authentication pass/fail by sending source—education tool for marketing + IT.
## Reading tips
Identify...
email-security-phishing-response
msp
seed-library
Apr 12, 2024
Read more →
Business email compromise escalation path
## Overview
BEC wires fraudulent payments—speed and legal tie-in matter more than malware IR sometimes.
## Immediate
Freeze transfers initiated; noti...
email-security-phishing-response
msp
seed-library
Apr 11, 2024
Read more →
Phishing triage: headers to inspect first
## Overview
Malicious messages are time-sensitive. Start with header facts before sandbox detonation.
## Priority headers
`Authentication-Results` (S...
email-security-phishing-response
msp
seed-library
Apr 10, 2024
Read more →