Homework
Three tasks to turn the lab into a reusable phishing-defense playbook.
All homework is defensive: awareness content, detection, and policy. Never send unauthorized phishing to real people.
Task 1 — Awareness Training Module
Objective
Turn campaign analysis into user-facing content.
Instructions
- Pick three phishing emails from the lab.
- For each, write a 100-word "red flag walkthrough" in plain language for non-technical employees.
- Include a "what to do instead" step for each.
Deliverable
A one-page employee handout in markdown.
Task 2 — DMARC Deployment Plan
Objective
Propose a phased DMARC rollout that would block the lab campaign.
Instructions
- Draft an SPF, DKIM, and DMARC record for a fictional acmecorp.com.
- Describe a 90-day rollout: monitor → quarantine → reject.
- For each phase, list monitoring metrics and rollback triggers.
Deliverable
Rollout plan as markdown.
Task 3 — Lookalike Domain Monitor
Objective
Automate domain monitoring.
Instructions
- Write a Python script that, given a brand domain, generates common typo-squat and homograph variants.
- Bonus: check each variant against a DNS resolver to see if it is live.
- Output: CSV with variant, technique, live Y/N.
Deliverable
domain_monitor.py.