Glossary: Logs and Data Sources for Investigations

Lookalike domain

A domain made to look like a real company's, such as kettleandcrane-help.example. It belongs to the attacker, who can set it up to pass SPF, DKIM and DMARC.