Incident Response
BEC Playbook: Vendor Email Thread Forensics
Reconstruct a business email compromise thread with header forensics, tone shifts, and banking-change validation steps.
KRW 450,000 informational only
Description
Participants parse staged MIME headers, identify subtle domain homoglyphs, and practice calling verification steps that protect customers. The scenario stresses operational resilience language instead of sensational fraud headlines.
Features
- MIME header diff highlighter
- Tone shift annotation cards
- Call-back verification script templates
- Payment routing change policy checklist (generic)
- Customer comms draft with cautious phrasing
- Tabletop insert for sales leadership
- Activity log for mailbox rule changes
Outcomes
- Spot homoglyph domains under time pressure
- Draft verification steps procurement teams accept
- Capture evidence for enterprise client escalation paths