Tagged phishing

Review email security with SPF, DKIM and DMARC checks and phishing analysis

Monitor Certificate Transparency logs for phishing and lookalike domain certificates

Trace phishing email origins through headers and validate SPF, DKIM and DMARC

Find phishing domains and typosquats in Certificate Transparency logs with crt.sh

Run device-code and illicit consent phishing tests against Microsoft 365 and Entra ID

Automate phishing report button triage with SOAR to classify emails and extract IOCs

Investigate phishing by analyzing reported emails, sandboxing links and purging messages

Plan social engineering pentests with OSINT profiling, phishing, vishing and pretexting

Unwrap obfuscated JavaScript from phishing pages and skimmers to recover the payload

Catch QR code phishing by decoding images in email that bypass link-based filters

Run authorized phishing simulations to track open, click and credential entry rates

Build an anti-phishing awareness program with simulations, training modules and metrics

Harden Google Workspace with phishing-resistant MFA, OAuth controls and sharing limits

Turn on Gmail phishing, spoofing and malware protections in the Google Workspace console

Block phishing, malware and BEC with Proofpoint Email Protection before inbox delivery

Create Splunk SOAR containers and phishing playbooks through the REST API

Build Cortex XSOAR playbooks for phishing, malware and account compromise response

Set up NextDNS over DoH or DoT to block malicious, phishing and cryptojacking domains

Investigate phishing emails from header analysis to URL detonation and containment

Detect AiTM phishing kits like EvilProxy and Evilginx by correlating Entra sign-in logs

Run phishing awareness campaigns in GoPhish and measure click and submit rates

Build GoPhish campaigns in Python with tracking pixels, SMTP profiles and CSV targets

Find open redirects in next and return parameters and chain them into phishing

Map adversary C2 servers and phishing domains by pivoting through DNS and cert logs

Check reported email headers, links and attachments and post a risk verdict

Run authorized phishing campaigns with domain, DNS and email authentication setup

Run authorized social engineering tests, including pretexting and vishing

Test initial access with phishing, password spraying, AiTM and device code flows

Test Entra device-code phishing and illicit consent paths in authorized tenants

Build evilginx2 phishlets to test MFA resistance in authorized phishing tests

Launch tracked phishing simulations through the GoPhish REST API

Register and configure lookalike domains with DNS and TLS for phishing tests

Run the out-of-band blue team handshake before any phishing campaign sends

Test Microsoft 365 mailbox compromise paths from consent phishing to persistence

Test PDF lures that route users to fake login portals in authorized phishing

Apply evidence-led methods for phishing test work and evidence review

Plan authorized phishing simulations with pretexts, lures and deconfliction

Design phishing pretexts and target shortlists from OSINT for authorized tests

Test QR-code phishing lures against email gateway URL scanners

Test Okta tenants for user enumeration, password spray and phishing gaps

Gather staff emails and org details to prepare phishing and social engineering tests