⚡AgentSkills
🔐 Cybersecurity · Security Incident Response

Stand up phishing defense beyond training videos

Technical controls + easy reporting + blameless drills reducing real click-through damage.

intermediate~30 minSecurity EngineersAppSecDevSecOps

Steps

  1. 1Enforce MFA everywhere, preferring phishing-resistant methods (FIDO2)
  2. 2Deploy DMARC with enforcement; monitor failing sources
  3. 3One-click report button feeding a monitored mailbox
  4. 4Simulate quarterly; measure report-rate not just click-rate
  5. 5Auto-quarantine messages matching reported patterns
  6. 6Blameless follow-ups: fix the process that made the lure plausible

Common Pitfalls

  • ▲Shaming clickers, teaching people to hide clicks
  • ▲SMS OTP treated as phishing-resistant

Commands

Install with skills CLI
$ npx skills add aniruddhaadak80/skills --skill incident-response-security-phishing-defense-program
Install globally
$ npx skills add aniruddhaadak80/skills --skill incident-response-security-phishing-defense-program -g

Tags

#phishing#social-engineering#awareness#cybersecurity#incident-response-security

Related skills

Execute the first hour of a suspected breach (Ransomware scenario)advanced

Contain, preserve evidence, and communicate without tipping off or destroying forensics.

🔐 Cybersecurity·~30m
Open →