hard20 pts · first answer countsphishing-analysisincident-responsemetrics
Why the first report time matters
In a real phishing campaign the first user report arrived 4 minutes after delivery, but the SOC acted after 3 hours. What does this show?
Discussion 0
Join free to post in the discussion.
Related questions
- Where to see SPF, DKIM and DMARC resultsCybersecurity Analyst
- What is spear phishing?Cybersecurity Analyst
- Backups that survive ransomwareCybersecurity Analyst
- What does SPF check?Cybersecurity Analyst
- Why chain of custody mattersCybersecurity Analyst
- Security event or security incidentCybersecurity Analyst
- What makes malware a trojanCybersecurity Analyst
- Double extortion ransomwareCybersecurity Analyst