On August 6th, as part of a systematic review of email configuration and rules we identified a suspicious forwarding rule and initiated our incident response process. This rule was found to have forwarded a number of emails from a specific individual's e-mail account to a suspicious external email address.'sANS focuses on teaching and sharing with the community. 'We also learn through experience and not everything can be learned in a classroom. 'We will share what we learned about the incident to the community in an effort to use the experience as a teaching moment for all. '
This webcast will walk through the technical details of the incident, how it happened, our investigation details, current indicators of compromises, and finally our overall lessons learned and security awareness recommendations to prevent these incidents in the future. '