I am trying to explore more ways to check if business email compromise is being happening in our organization, just before the end user recognises it.
i have a list of domains that we usually communicate with, there are around 490 domains I have listed and added to a csv file. there is an index which is updated in realtime which have logs from mimecast. I would like to list out domains which are trying to establish email communication with our organization which are not there in the csv file.
so if a non matching domain is emailing us, it should display in a dashboard. is this possible?
... View more