From click to containment: How RumbergerKirk stopped a business email compromise in minutes with ThreatLocker

This case study describes a business email compromise where a legitimate contact's message contained a credential-harvesting link sent to multiple employees at a law firm; one user clicked the link. The firm's CIO used ThreatLocker Unified Audit to identify the click, deployed Network Control to block the malicious domains organization-wide, and verified via logs that the threat was contained without further compromise.