Explore phishing forensics techniques in this BSides Indianapolis 2018 conference talk. Learn to distinguish between suspicious and malicious emails through in-depth analysis of message headers, file properties, and source code. Discover essential tools for investigating potential phishing attempts, including URL expanders, web page scanners, and decoders. Gain practical insights into email security and forensic analysis from speaker Matt Scheurer as he guides you through real-world examples and demonstrates effective investigation methods.