WEBVTT 00:00:01.040 --> 00:00:04.440 Well, we've come to the end of this course on Initial Access with Gophish. 00:00:05.140 --> 00:00:06.370 As we wrap up the course, 00:00:06.470 --> 00:00:09.910 this section will show you where to get more information on related topics. 00:00:10.630 --> 00:00:14.250 If you want more information on Gophish's usage and configuration, 00:00:14.640 --> 00:00:19.460 a good place to start is the Gophish user guide at this link. Gophish's 00:00:19.460 --> 00:00:24.350 documentation also includes guides to automation and using their API here. 00:00:25.540 --> 00:00:29.890 In Gophish's own words, it was built to be API first with a nice visual 00:00:29.890 --> 00:00:34.150 dashboard as a wrapper around that, so their API should be easy to leverage. 00:00:34.920 --> 00:00:38.030 More information about initial access can be found at the 00:00:38.030 --> 00:00:41.200 TA0001 tactic on the MITRE ATT&CK website. 00:00:41.840 --> 00:00:45.160 You can also find more detailed guides on the MITRE website covering 00:00:45.160 --> 00:00:47.450 the spear phishing techniques used in this course. 00:00:48.040 --> 00:00:50.790 You can also explore more information on different aspects of 00:00:50.790 --> 00:00:54.290 phishing and spear phishing by reading up on different 00:00:54.290 --> 00:00:56.450 techniques to identify phishing emails. 00:00:56.940 --> 00:00:59.160 This reading can include much more sophisticated 00:00:59.160 --> 00:01:00.950 attacks than we used in this course. 00:01:01.840 --> 00:01:05.660 Other topics I would recommend are phishing mitigation, as well as the 00:01:05.660 --> 00:01:08.050 most important step in preventing phishing attacks, 00:01:08.440 --> 00:01:10.150 user education and training. 00:01:10.910 --> 00:01:13.810 I hope you enjoyed this course on Initial Access with Gophish, 00:01:14.140 --> 00:01:17.540 and I encourage you to continue experimenting with its features and 00:01:17.540 --> 00:01:20.150 testing different capabilities within a lab environment.