AlertMonitor Feature

Phishing? Outlook Button

SOC-style phishing analysis in ~8 seconds. One click in Outlook triggers full header enrichment, attachment analysis, and a 0–100 risk score with a plain-English explanation.

How it works

  • User clicks "Phishing?" → email + headers sent for analysis
  • Enrichment: SMTP/IP details + domain history + reputation signals
  • Attachments analyzed to detect malicious behavior
  • Returns a clear 0–100 risk score + explanation + what to do next
  • Trains users over time by showing patterns

Why it matters

One wrong click can trigger device isolation, forensic investigation, and a full restore from backup — costing hours of SOC and IT time plus days of employee downtime. 80% of phishing attacks can be caught simply by checking the real sender address. Phishing? trains users to spot these patterns naturally.

Understanding the Risk Score

0–25Low RiskLikely safe — no red flags
26–60CautionSome signals — review before acting
61–100High ThreatDo not interact — report immediately