How to Catch a Phish: A Practical Guide to Detecting Phishing Emails

Table of Contents
About the Author
About the Technical Reviewer
Acknowledgements
Chapter 1: How Email Works
	Understanding Email Architecture
		Step 1
		Step 2
		Step 3
		Step 4
		Step 5
	Email Header and Content
	Gmail Web Mail
	Yahoo! Web Mail Application
	Outlook Desktop Mail Application
	Email Header Analysis Tools
	MxToolbox
	Google Admin Toolbox
	Microsoft Message Header Analyzer
	Summary
Chapter 2: Phishing Tactics and Techniques
	Summary
Chapter 3: Incident Response
	PICERL
		Preparation
		Identification
		Containment
		Eradication
		Recovery
		Lessons Learned
	Summary
Chapter 4: Analyzing Message Content
	What Is Content?
	Message Greetings
	Threatening or Urgent Requests
	Impersonation Attempts
	Summary
Chapter 5: All About Links
	What Is a Link?
	Links in Emails
	What to Do
	Link Hovering
	Link Extraction
	VirusTotal
	urlscan.io
	URLVoid
	Summary
Chapter 6: How to Handle Attachments
	What Is an Email Attachment?
	Does the Attachment Make Sense?
	Malware
	Evaluating Attachments
	Static and Dynamic Reviews
	Extracting Attachments
	VirusTotal
	Sandboxing
	ANY.RUN
	Hybrid Analysis
	Summary
Chapter 7: Log Searching and Response
	What Are Logs?
	Centralized Log Management
	Security Onion and Splunk
	Security Onion
	Splunk
	Summary
Chapter 8: Remediation and Lessons Learned
	Reimaging Your PC
	Remediation
	Windows Updates
	Lessons Learned
	Summary
Index