Cloud Email Compromise Incident Response Playbook
This download contains a 6clicks Incident Response playbook for Cloud Email Compromise.
The purpose of a Cyber Security Playbook, or Security Playbook, is to provide all members of an organisation with a clear understanding of their roles and responsibilities regarding cybersecurity â before, during and after a security incident.
Adversaries may compromise email accounts that can be used during targeting. Adversaries can use compromised email accounts to further their operations, such as leveraging them to conduct Phishing for Information or Phishing. Utilizing an existing persona with a compromised email account may engender a level of trust in a potential victim if they have a relationship, or knowledge of, the compromised persona. Compromised email accounts can also be used in the acquisition of infrastructure (ex: Domains).
This playbook contains information in the following areas:
- Preparation
- Investigate
- Remediate
- Communicate
- Recovery
Sector(s):
- All
Jurisdiction(s):
- All
