-: In this section of the course 2 2
we're going to be covering email monitoring. 3 3
Our focus in this section is going to continue to be 4 4
in domain 1, security operations, and specifically, 5 5
we'll continue our focus on objective 1.3. 6 6
Objective 1.3 states that given a scenario, 7 7
you must be able to use appropriate tools or techniques 8 8
to determine malicious activity. 9 9
As we move through this section, 10 10
we're going to start out by conducting an analysis 11 11
of your email monitoring tools output as you start 12 12
to explore the different types of indicators of compromise, 13 13
known as IOCs, that could be used to determine 14 14
if an email phishing campaign or impersonation campaign 15 15
has been occurring inside your organization. 16 16
Then we're going to explore how you can conduct an analysis 17 17
of an email header or an email's content for malicious data. 18 18
Next, we'll focus on the proper configuration 19 19
of your email server to give you additional security, 20 20
as well as how to conduct an analysis of an SMTP log 21 21
and how to secure emails 22 22
using S/MIME and digital signatures. 23 23
After that, I'm going to perform a hands-on demonstration 24 24
that shows you how to analyze an email's header 25 25
to determine if an indicator of compromise or IOC 26 26
can be identified within that email header. 27 27
Now finally, we're going to take a short quiz 28 28
to see what you learned during this section of the course 29 29
and review each of those quiz questions fully 30 30
to ensure you can explain why the right answers are right. 31 31
This is going to be a fun section as we begin to dive deep 32 32
into determining how secure your email really is 33 33
within your organization 34 34
because email is such a common attack vector 35 35
that's used by threat actors all the time 36 36
during their social engineering campaigns. 37 37
This includes the use of things like phishing, 38 38
spear phishing, or whaling against your end users 39 39
and we need to be able to identify it and stop it. 40 40
So let's dive into the world of email monitoring 41 41
in this section of the course.