91% of attacks on districts start with Phishing. While we do all that we can to prevent attacks, what do we do if an attack occurs? Participants will explore their own domains using Enterprise level security tools to uncover potential threats to their environment. The session will start with an introduction to the basics of the Investigation Tool and Security Center followed by guided activities and prompts to explore potentially harmful situations happening right now in their own domains. From phishing attempts to inappropriate file uploads and shares, we will explore and mitigate security risks happening live in Google Workspace for Education.