Windows Analysis Report
https://www.blueteamhandbook.com/

• EGA enabled
• AMSI enabled

```json
{
  "contains_trigger_text": true,
  "trigger_text": "Check out the Table of Contents. and the cover art. Read the forwards.",
  "prominent_button_name": "BUY NOW FROM amazon.com",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false
}

```json
{
  "contains_trigger_text": true,
  "trigger_text": "Check out the Table of Contents. and the cover art. Read the forwards.",
  "prominent_button_name": "Check out our Event Calendar",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": true,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false
}

```json
{
  "contains_trigger_text": true,
  "trigger_text": "To view secured document, click here",
  "prominent_button_name": "Check out our Event Calendar",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": true,
  "has_visible_captcha": false,
  "has_urgent_text": true,
  "has_visible_qrcode": false
}

```json
{
  "contains_trigger_text": true,
  "trigger_text": "Have you ever asked a security product vendor this question: \"What should we monitor?\" only to get the answer \"That is something your organization needs to decide\" or words to that effect?",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false
}

```json
{
  "brands": [
    "BTHb:INRE",
    "Cybrary",
    "GoodReads",
    "Security Weekly",
    "Eric Conrad"
  ]
}

```json
{
  "brands": [
    "BTHb:INRE",
    "BTHb:SOCTH"
  ]
}

```json
{
  "contains_trigger_text": true,
  "trigger_text": "VIEW SHARED FILE",
  "prominent_button_name": "VIEW SHARED FILE",
  "text_input_field_labels": [
    "Email Address",
    "Password"
  ],
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": true,
  "has_visible_qrcode": false
}

```json
{
  "contains_trigger_text": true,
  "trigger_text": "INRE_V1_Errata",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false
}

```json
{
  "brands": [
    "Blue Team Handbook"
  ]
}

```json
{
  "brands": [
    "Blue Team Handbook",
    "BTHb",
    "INRE",
    "Book Authority.org",
    "Cybrary",
    "GoodReads",
    "SOC",
    "SIEM",
    "Security Weekly",
    "Eric Conrad"
  ]
}

```json
{
  "brands": [
    "Blue Team Handbook",
    "Don Murdoch"
  ]
}

```json
{
  "brands": [
    "INRE_V1_Errata",
    "Don Murdoch"
  ]
}

```json{  "legit_domain": "blueteamhandbook.com",  "classification": "unknown",  "reasons": [    "The brand 'Blue Team Handbook' is not widely recognized as a well-known brand.",    "The URL 'www.blueteamhandbook.com' matches the brand name without any suspicious elements such as misspellings or unusual domain extensions.",    "There are no extra words or characters in the domain name that would suggest phishing.",    "The presence of input fields for 'Email Address' and 'Password' is common for legitimate sites but also a common target for phishing."  ],  "riskscore": 3}

URL: www.blueteamhandbook.com
            Brands: Blue Team Handbook
            Input Fields: Email Address, Password