Reveal, timeline, and report, phishing and BEC email investigation exercises for SOC analysts
Dana Whitfield, an accounts-payable clerk at the fictional Cascade Logistics, forwards a 'past-due invoice' email to the SOC after her workstation starts running hot and sluggish. Determine whether the email is malicious, how any payload would have executed, and which indicators should be blocked.