Cooper Edmunds

According to the FBI, business email compromise is now the top way companies lose money to cybercrime. AI-powered phishing toolkits, MFA-bypass kits, and residential proxies let attackers sign in looking exactly like your client, and no single signal gives them away. Catching M365 attacks now requires analyzing many small, quiet signals together, in context.

In this workshop, the Petra detection team will show how our specialized machine learning models do that work in real time. Using anonymized examples from real, advanced attacks, you'll work in groups to separate malicious activity from benign activity that looks nearly identical, and learn what combination of signals actually exposes an attack in the AI era. We'll close by building a repeatable process for presenting incident forensics to your clients.

Attendees are encouraged to run a complimentary Petra Scan ahead of this session.

Most attackers no longer break in. They log in looking exactly like your client. This shift has been driven by new emerging threats: MFA-bypass attacks, AI-powered toolkits, and hardest to catch of all, residential proxies. Cooper Edmunds unpacks the threat intel behind today's account takeovers, then shows how MSPs can turn it into a clear case for cyber services.