Defending Kestrel Logistics' email, where the finance team is a constant business email compromise target, with an eight-layer defense stack that each message passes on its way to the user: authentication rejecting 1,842 spoofs, reputation closing an open relay, anti-spam, anti-malware sandboxing a macro dropper, content and URL protection blocking a bank lookalike, users reporting with one click, detection and response clawing back 31 delivered threats, and outbound data protection holding customer records. On the left, the domain's SPF, DKIM, DMARC and MTA-STS records go from missing or p=none to signed, p=reject and enforced; on the right, user click rate falls from 28% to 6%, report rate rises from 9% to 52%, reports grow from 12 to 640 surfacing 57 threats, and a campaign is removed from 200 mailboxes in 40 seconds.

CY-MID-004Mid Level · Email Security Operations

Email Security Operations — The Email Defense Stack

A hands-on mid-level course that defends an organization's email against phishing, business email compromise, and malware - the channel most attacks arrive through. Work the email defense stack - eight layers a message passes from arrival to the user and back out: Authentication, Reputation, Anti-Spam, Anti-Malware, Content & URL, User, Detection & Response, and Outbound & Data - authenticating senders, filtering and scanning, and stopping phishing and BEC, with real SPF/DKIM/DMARC, MTA-STS, sandboxing, URL protection, and clawback. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Authenticate senders with SPF, DKIM, and DMARC and move DMARC to enforcement.
Vet connections and filter spam, scan and sandbox attachments, tuned to catch threats.
Detect phishing, impersonation, and BEC, and protect URLs at click time.
Enable users as a reporting last line, claw back delivered threats, and protect your domain and data.

Price:৳8,000