Phishing Prevention

Phishing remains one of the most common and effective ways for attackers to gain initial access to target systems. To counter this, defenders can deploy a variety of tools and controls designed to protect users from malicious emails.

The MITRE ATT&CK Framework describes Phishing for Information (opens in new tab) as the attempt to trick targets into divulging information.

In this room, you’ll learn about various security measures organizations can implement to prevent, detect, and mitigate phishing threats.

Learning Objectives

• Understand core email security controls (SPF, DKIM, DMARC, S/MIME)
• Analyze SMTP network traffic and email content
• Explore anti-phishing protection measures

Optional Prerequisites

• Cover Phishing to gain an overview of phishing campaigns
• Check out Phishing Analysis Fundamentals to learn common phishing types