Your user received a phishing email, what next? Is it just a normal drive-by? Do you have an APT to deal with? Using Threat Intelligence and Open Source Information to identify and respond to Phishing e-mails. #scripts

https://portal.galacticscan.com/doc/10/OSINT.pdf
https://mha.azurewebsites.net
https://gchq.github.io/CyberChef

Mission: Analyze a suspected phish