Knowledge Base

Find answers to common questions and learn more about our services

Journaling for compliance migrations

## Overview Journaling copies mail for supervision/archiving—impacts storage and privacy. ## Legal first Retention scope defined by counsel—not “jour...
email-security-phishing-response msp seed-library
Apr 22, 2024 Read more →

MX record cutover checklist

## Overview Wrong MX loses mail silently—treat as change of the highest risk class. ## Pre-check Lower **TTL** 24–48h ahead; verify SPF/DKIM/DMARC fo...
email-security-phishing-response msp seed-library
Apr 21, 2024 Read more →

Third-party phishing simulation cadence

## Overview Simulations measure behavior—but **culture** matters more than scores. ## Cadence Monthly for high-risk verticals; quarterly others; skip...
email-security-phishing-response msp seed-library
Apr 20, 2024 Read more →

Email trace in Exchange Online basics

## Overview Traces answer “did message arrive, where stuck, why bounced?” ## Steps EAC → mail flow → message trace; filter by sender/recipient/time w...
email-security-phishing-response msp seed-library
Apr 19, 2024 Read more →

Graymail versus phishing: helpdesk script

## Overview Helpdesk confuses marketing clutter with attacks—wastes SOC time. ## Script prompts “Did sender have prior relationship? Any **credential...
email-security-phishing-response msp seed-library
Apr 18, 2024 Read more →

CEO fraud / gift card scams user training blurb

## Overview Short training blurb—paste into newsletter or Teams announcement. ## Blurb “Executives will never email you to buy gift cards urgently. V...
email-security-phishing-response msp seed-library
Apr 17, 2024 Read more →

Attachment sandbox false negatives communication

## Overview When sandbox misses malware, clients blame MSP stack—be factual about limits. ## Explain Deterministic evasion, password zips with delaye...
email-security-phishing-response msp seed-library
Apr 16, 2024 Read more →

User-reported phishing workflow

## Overview Reporting add-ins turn users into sensors—reward good reports, close loop fast. ## Flow User reports → SOAR triage bucket → auto-duplicat...
email-security-phishing-response msp seed-library
Apr 15, 2024 Read more →

Mailbox forwarding rules audit script idea

## Overview Silent external forwards exfiltrate mail post-BEC. Audit regularly—even if UI-only initially. ## What to look for `ForwardingSMTPAddress`...
email-security-phishing-response msp seed-library
Apr 14, 2024 Read more →

Safe sender allowlisting risks

## Overview Allow lists bypass helpful filtering—attackers abuse compromised trusted senders. ## Policy Require VP+ approval for domain allow; time-b...
email-security-phishing-response msp seed-library
Apr 13, 2024 Read more →

DMARC reporting interpretation for clients

## Overview DMARC aggregate reports (RUA) show authentication pass/fail by sending source—education tool for marketing + IT. ## Reading tips Identify...
email-security-phishing-response msp seed-library
Apr 12, 2024 Read more →

Business email compromise escalation path

## Overview BEC wires fraudulent payments—speed and legal tie-in matter more than malware IR sometimes. ## Immediate Freeze transfers initiated; noti...
email-security-phishing-response msp seed-library
Apr 11, 2024 Read more →