Email has long been the major attack vector for adversaries wishing to reach users of your information system: phishing / credential collection operation, compromise of the workstation by a malicious payload in an attachment, fraud and identity theft.
Your email systems and user awareness are essential security measures against these threats.
The CWATCH Mail Report solution complements your security measures by giving an active role to your users by allowing them to easily report a suspicious email, with all the technical data required for investigations, and to benefit from the expertise of the CWATCH CERT in their analysis.
The service helps to shorten detection times and enable effective responses, and can be complemented with SOC CWATCH managed services to enhance your organization’s security.
How does it work for users?
NB: The CWATCH Mail Report solution can also be used on its own and configured to send the notification email to your security team, without the services of the CWATCH SOC / CERT.
The benefits
The reporting function is extremely easy for users to use
Email analysis is carried out by our experts on our investigation platform
Technical analysis is backed up by human analysis to identify cases of fraud or manipulation
If you authorize it, the CWATCH SOC / CERT team can automate the deletion of malicious e-mails.
The CWATCH SOC / CERT team can help you measure the effectiveness of your user awareness campaigns
How to go further?
By subscribing to Almond SOC’s detection services, you can gain a more advanced automated detection and response capability, enabling, for example:
- Identify malicious emails that have been delivered through alerts generated by your email security solutions and proactively remove them before they become a problem.
- Identify when a user has actually clicked on a malicious link in an email and adapt the response.
- Proactively adapt filtering on your email gateways.
Also, if you need assistance with a security incident, don’t hesitate to contact our dedicated CERT team
who can help you deal with it quickly:
+33 (0)1 83 75 36 94