الطلب
“Draw a phishing incident workflow: a reported email is triaged, false positives close, confirmed phishing is analysed, credential compromise forces a password reset, malware delivery isolates and analyses the device, then containment, eradication, recovery, post-incident review, and end.”
جرّب إذنAdd a user notification after containment.Add a legal review for reported data loss.
ما الذي يتضمنه هذا الرسم
اقرأ القرارات الكامنة وراءه.
01
Is the email actually a phishing attempt?
02What is the impact
credential theft or malware delivery?
Use this flowchart when standardizing the phishing incident response process for a SOC team.