A Call from the Museum: A Phishing Analysis Walkthrough

What you'll learn

• Email Header Analysis: Dissecting raw .eml source code to verify sender authenticity, trace mail routing, and spot spoofing indicators. - Attachment Triage: Analyzing password-protected archives used by attackers to evade automated email sandbox detection. - Initial Execution Analysis: Reviewing how weaponized shortcut files and baseline script components are leveraged right after a user clicks. - Basic PowerShell Deobfuscation: Uncovering a script’s real behavior by reversing techniques like Base64 encoding, string manipulation, and commands piped directly into execution.

Topics covered