investigating-phishing-email-incident

【数据与研究】Investigates phishing email incidents from initial user report through header analysis, URL/attachment detonation, impacted user identification, and containment actions using SOC tools like Splunk, Microsoft Defender, and sandbox analysis platforms. Use when a reported phishing email requires full incident investigation to determine scope and impact.

独立 GitHub 快照 · 自动分类 · 以原作者文档为准