Skill UI

Queries Certificate Transparency logs via crt.sh and pycrtsh to catch phishing domains, unauthorized certificates, and typosquatting variations, flagging unexpected issuers and wildcard certificates for proactive brand-impersonation defense.

Detect and block quishing by analyzing QR images in email attachments, combining OCR, URL reputation checks, and mobile-side defenses to stop malicious links that evade traditional filters.

Guides tuning Microsoft Defender for Office 365, Proofpoint, Mimecast, and Barracuda email gateways to detect and block spearphishing by enforcing impersonation guards, URL detonation, attachment sandboxing, and custom detection rules.

Implements comprehensive Google Workspace admin hardening with FIDO2-backed MFA policies, phishing-resistant access controls, email authentication (SPF/DKIM/DMARC), DLP rules, OAuth app oversight, and external sharing restrictions for enterprise-grade cloud office defense.

Implement advanced Google Workspace phishing and malware defenses through the Admin Console by enabling anti-spoofing, enhanced pre-delivery scanning, attachment controls, Enhanced Safe Browsing, APP enrollment, and email authentication monitoring for enterprise email traffic.

Guide to deploying Mimecast Targeted Threat Protection modules (URL, Attachment, Impersonation, Internal Email) for phishing and spearphishing defense, from policy configuration through pilot validation and tuning.