How It Works

Part of Forsyte’s four-step approach to phishing defense, Phish Hunter includes a flexible, customizable threat detection engine designed to monitor user logins, identify anomalies, and apply risk tags to accounts and sessions. Built on Microsoft technology and hosted in Azure, Phish Hunter protects users from phishing URLs at time-of-click by automatically blocking attack URLs.

By tracking forensic behavioral data, maintaining known attack policies, and logging signs of compromise, Phish Hunter dramatically reduces the time to discover and respond to an attack. Establish user defined threat levels to trigger built-in automation and workflow polices that enforce account protection and modification of access policies.

When a threat is detected, policy rules are automatically sent for processing. Alerts are then evaluated by the policy inspector. User’s activity is checked against a threat matrix. High and medium risks are sent for action and automated remediation takes place.

SOLUTION BENEFITS:

	Educate Ensure your employees understand and can recognize sophisticated phishing and ransomware attacks and can apply this knowledge in their day-to-day job.
	Simulate   Send simulated attacks to users to determine how they respond to attacks and determine if the right policies are in place to help mitigate real attacks.
	Prevent      Stop users from giving away their credentials before accounts get compromised using a managed Whitelist and a global Backlist
	Remediate When threats have been identified, automated remediation occurs to lock down compromised accounts and prevent further spreading across the operations.