Enhancing Business Email Compromise Incident Response: New Email & Cloud Security Configuration Snapshot

This document introduces Cybereason’s Security Configuration Snapshot, a no-cost enhancement to BEC investigations that automates 250+ checks across Microsoft 365 and Google Workspace to identify configuration weaknesses. Leveraging CISA SCuBA guidance and frontline intelligence from thousands of BEC cases, it highlights gaps across authentication, access controls, cloud storage, and email settings, maps findings to MITRE ATT&CK, and delivers immediate, actionable recommendations. The snapshot integrates seamlessly into incident response workflows without additional client effort and can be conducted under legal privilege, helping organizations minimize lateral movement, establish a security baseline, and reduce repeated BEC exposure.