Phishing Forensics - Is It Just Suspicious or Is It Malicious

Explore phishing forensics techniques in this BSides Indianapolis 2018 conference talk. Learn to distinguish between suspicious and malicious emails through in-depth analysis of message headers, file properties, and source code. Discover essential tools for investigating potential phishing attempts, including URL expanders, web page scanners, and decoders. Gain practical insights into email security and forensic analysis from speaker Matt Scheurer as he guides you through real-world examples and demonstrates effective investigation methods.

Introduction
About Matt
Disclaimer
Situation
Message headers
File menu
Properties
Messages
Other Email Clients
View Source
Sample Email
Header Information
Domain Name
Attachment
Infographic
Header
Text Editor
Tools
URL Expander
Web page scanners
Image converter
Website screenshot generator
Website source code viewer
Decoders
Whois Engines
Additional Tools
SpamCup
Javi