Phishing & Social Engineering Defense
Recognize the psychology behind lures, read spoofed-email headers, spot credential-harvesting pages, and build a human firewall.
One-time payment · lifetime access · lessons, labs, exam and certificate included · no subscription.
About this course
Most breaches start with a person, not an exploit, so this course teaches the defender's skills against phishing and social engineering. You learn the psychological levers attackers use — authority, urgency, fear, trust and curiosity — and how to name them to break their effect. You then dissect a sample spoofed email, reading the Received chain, Return-Path, Reply-To and Authentication-Results to prove SPF and DMARC failures. You examine a sample login page to see how a form's action reveals credential theft, and finish with layered defenses: DMARC enforcement, MFA and FIDO2, link sandboxing, look-alike domain monitoring and authorized simulations. Every exercise uses provided documentation-only samples on your own computer, for authorized, legal learning only.