AI changes how phishing, business email compromise, reconnaissance, and malware workflows reach defenders, creating pressure on verification and response. This course develops an intermediate blue-team view of those attack chains and the controls that contain them, from email identity safeguards and out-of-band checks to behavioral detection and layered response planning. You will leave with a practical framework for validating suspicious activity, tuning detections, and coordinating escalation against AI-enabled attacks.
The course covers AI-accelerated phishing, business email compromise, voice cloning, deepfakes, reconnaissance, credential abuse, and malware variation. It also covers SPF, DKIM, DMARC, out-of-band verification, behavioral detections, macro, script, and egress controls, documentation, and escalation.