by zhaoxuya520cab634bd855fNo license40K starsListed Oct 9, 2026Updated Oct 9, 2026Repository updated 2 weeks ago
Use for authorized email security review including phishing analysis, header authentication (SPF/DKIM/DMARC), BEC patterns, and mailbox token abuse research.
Guides authorized email security review: phishing analysis, SPF/DKIM/DMARC header authentication, BEC patterns and mailbox token abuse.
NOW: 确认授权（分析样本邮件 / 租户配置评审）NOW: 不向真实用户二次投递恶意样本ACT: 头认证 → 内容/URL → 附件沙箱 → 租户控制面建议references/email-auth-checklist.md../malware-analysis/ ../attack-chain/（钓鱼阶段） ../windows-ad/（令牌）上游: MASTER R36
MUST NOT: 未授权对第三方域群发测试钓鱼
Source:zhaoxuya520/reverse-skillinskills/email-securityat commitcab634b
License: No license
Content belongs to its original authors. SourceWeft indexes it from a public repository.
zhaoxuya520
Guides authorized Android and iOS app reverse engineering and security testing, from static analysis to runtime instrumentation.
zhaoxuya520
Guides reverse engineering of JavaScript-based custom DSL/VM interpreters, opcode dispatchers and risk-control engines.
zhaoxuya520
Guides authorized Active Directory and Windows identity attack research, from enumeration to Kerberos, AD CS and relay paths.
zhaoxuya520
Guides authorized security testing of desktop thick clients across local storage, IPC, traffic, and update channels.
zhaoxuya520
Guides authorized OSINT and cyber threat intelligence work, enriching IOCs and campaigns from public sources with corroboration and evidence handoff.
zhaoxuya520
Guides blue-team threat hunting and detection engineering with hypotheses, SIEM queries, Sigma/YARA rules and validation.
anthropics
Applies a firm's KYC/AML rules grid to a parsed onboarding record, scoring risk and routing outcomes.
anthropics
Tracks compliance requirements, audit readiness, and evidence for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.
Guides SOC analysts through triaging Google SecOps security alerts, from investigation to closure or escalation.
Guides SOC analysts through deep security incident and entity investigations in Google SecOps using UDM queries and timelines.
Guides proactive threat hunting in Google SecOps using UDM queries, IoC lookback, prevalence and outlier analysis.
□ 完整原始头：Received 链、From/Return-Path 一致性□ SPF/DKIM/DMARC 对齐结果□ URL 沙箱与附件静态（联合 malware-analysis）□ 仿冒品牌与回复地址差异□ 租户：反钓鱼策略、外部标记、MFA、OAuth app 同意