What are some effective ways to identify phishing emails?

Consider using tools like Urldefense or Proofpoint, though they've had their failures too. The approach you take should really depend on how sophisticated the phishing attempts are, especially if they target specific individuals within your organization.

In my experience, educating users is crucial. Security tools can fail, so the more you instill a mindset that encourages caution—like not clicking every link in emails—the safer your team will be.

We've employed Avanan and set it up so that we send Docusign and similar emails directly to quarantine. Users have to request to review these emails with us, which helps prevent any mishaps.

We require our users to complete monthly training through KnowBe4, and it seems to work pretty well. Also, it's essential to have security tools in place that can detect any suspicious activity, like SIEM or EDR systems, as well as alerts for risky sign-in attempts.

Hornetsecurity is another solid choice. Alongside awareness training, they have checks for any links clicked in emails, providing a layer of security.