Forum Discussion
ExMSW4319
Jul 03, 2020Iron Contributor
Started with MSN 2.0 here, and don't even mention n.a.n-a.e.
To answer the poster's question, I would say don't initially focus on the tech.
1) stay on top of news sources
2) operate an Abuse mailbox unless your helpdesk product is up to processing e-mail threats
3) if you have mail flow rules doing detection, get them to trigger action
4) ask your helpdesk to bring cases and even fixes that involved a security aspect to your attention
These measures are intended to help you spot the threats you don't see or have not arrived yet. We use a collection of third-party systems not germane to this question, and I tend to just use the MS tools for remediation.