Walk the Phishing Report
Triage a suspected phishing report by preserving evidence, checking exposure, and escalating with containment signals.
Security triage A user forwards a payroll-themed message and asks if it is safe. The email may be one lure or part of a wider campaign. Your choices determine whether evidence is preserved and whether exposed accounts are contained quickly. NIST incident response Preserve -> assess exposure -> escalate for containment Help desk is the detection front door. Do not solve phishing by deleting evidence; solve it by capturing the artifact and routing the risk. Shortcut Delete the email and reassure the user. Security gets enough evidence to search, block, and contain. Containment starts with evidence quality. 01 Capture 02…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in