Report suspicious activity with useful facts without waiting for certainty.
You do not need certainty to report a security concern. You need useful facts. Report the observable Name what you saw: alert, link, attachment, permission prompt, device loss, unusual login, unexpected MFA push, or changed inbox rule. Include time, system, account, and any action you took. Do not investigate by poking Clicking around to prove a suspicion can make the incident worse. Avoid opening more links, forwarding malware to teammates, deleting evidence, or changing settings unless the response team asks. Preserve context Screenshots, original messages, URLs, sender details, timestamps, and device names help responders connect one report to a wider…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in