Your notes are scattered across the desk as you review what you have. The org chart is real. The Amber Band override is real. And Isabella Laurent is the only one who can approve it. That makes her the obvious target. You now know: - Her role: Director of Risk Oversight. - Her email: `[email protected]` (from the org chart). - Her weakness: the Amber Band override, which lets her delay alerts, which means she can hide risk. But how do you exploit it? You consider your options: 1. Phish her directly, using a spear-phishing email (see [[Glossary#Spear Phishing]]) to trick her into revealing override procedures. Maybe later. 2. Manipulate an Amber Band alert, forcing a situation where she has to override, then watch her response. You would need more for that. 3. Find a disgruntled employee in Risk Oversight who might leak her habits. **What do you do?** - Research Isabella Laurent: dig into her background for weaknesses. [[Research Isabella Laurent]] - Investigate Amber Band triggers: find a way to force an alert. [[Cybercrime/The_Phisherman/Investigate Amber Band - Menu|Investigate Amber Band triggers]] - Find a disgruntled employee: maybe someone in Risk Oversight will talk. [[Cybercrime/The_Phisherman/Find Disgruntled Interns|Find Disgruntled Interns]] - Abandon this path: too risky. [[Cybercrime/The_Phisherman/Research Blackridge|Research Blackridge]]