**What do you do?** - Research Isabella's override history: if she has used this before, there may be a pattern. [[Research Isabella Override History|Research Isabella's override history]] - Find out what triggers an Amber Band alert: if you can force one, you can test her response. [[Cybercrime/The_Phisherman/Find Amber Band Triggers|Find Amber Band triggers]] - Use the org chart to target Isabella: you have enough to act. [[Cybercrime/The_Phisherman/Use Org Chart to Target Isabella|Use the org chart to target Isabella]] - Abandon this path: too much uncertainty. [[Cybercrime/The_Phisherman/Research Blackridge|Abandon this path and get back to the drawing board]] - Contact FinanceGhost for more details: he might know how this works in practice. [[Cybercrime/The_Phisherman/Contact FinanceGhost|Contact FinanceGhost]] - Go back to the org chart: there may be more to uncover. Worth a closer look. [[Verify the Leak]]