Fighting Phishing

Index

A

• Abnormal Security, H1 2023 Email Threat Report, 18
• Acceptable Use Policy (AUP), 75–79, 403
• access control best practices, 84
• accessibility, SAT and, 291–292
• account management best practices, 82
• account takeover (ATO), 32–33
• ADA (Americans with Disabilities Act), 291–292
• Admin, end users not logged in as, 232
• Adobe Captivate, 297
• advanced defenses
  • about, 235
  • AI-based content filters, 235–237
  • application control programs, 237–238
  • canaries, 244–246
  • email server checks, 242
  • fighting USB attacks, 247–248
  • highlighting new email addresses, 246–247
  • honeypots, 244–246
  • phone-based testing, 249
  • physical penetration testing, 249
  • proactive Doppelganger searches, 243–244
  • red/green defenses, 238–241
  • single-sign-on (SSO) systems, 237
• AI (artificial intelligence), 235–237, 269
• AI-based content filters, 235–237
• AlienVault, 11
• aligned display names, 154–155
• allowlist, 207
• Amazon, 25
• Amazon AWS, 366
• Amazon Workspaces, 239, 373
• American Standard Code for Information Interchange (ASCII), 324–325
• Americans with Disabilities Act (ADA), 291–292
• anti-BEC policies, 108–109
• anti-domain spoofing, 205–206
• anti-malware, 200, 218
• anti-phishing filters, as an endpoint defense, 218
• anti-phishing policies
  • anti-BEC policies, 108–109
  • combatting successful fishing, 104–107
  • definitions, 91–92
  • employee monitoring, 109
  • importance of, 89–90
  • incident response, 107–108
  • recognizing common signs of social engineering, 94–102
  • reporting, 102–104
  • training, 92–94
  • what to include, 90–109
• Anti-Phishing Working ...