Digest VIP impersonation attempts from Abnormal Security
Every morning, WebRun opens Abnormal Security, reviews newly detected threats targeting your executives and finance team, logs each one to a Google Sheet with the sender and technique used, and emails your security team a digest so impersonation attempts get a same day review.
- No credit card
- Under $0.01 per run
- Cancel anytime
What does WebRun do on every run?
The exact actions WebRun takes, in order - in plain language, so you can adjust anything.
-
WebRun signs in and gets to work
Opens
abnormalsecurity.comin a real browser with your saved login - no setup, no API keys. -
1
Abnormal Security - check threats targeting VIPs
abnormalsecurity.com
WebRun opens Abnormal Security to check threats targeting VIPs. - Open Abnormal Security and review threats detected in the last 24 hours
- Note any threat targeting an executive, finance, or HR contact
- Record the sender, technique, and whether it was auto remediated
Done when Every VIP targeted threat from the last 24 hours has been reviewed.
-
2
Google Sheets - log each detection
google.com How to Automate Google Sheets
WebRun opens Google Sheets to log each detection. - Open the threat log sheet
- Add a row for each VIP targeted detection with sender and technique
- Note whether Abnormal Security already auto remediated it
Done when Today's VIP targeted detections are logged in the sheet.
-
3
Gmail - email the daily digest
gmail.com How to Automate Gmail
WebRun opens Gmail to email the daily digest. - Draft and send the daily digest email to the security team
- List today's detections grouped by targeted employee
- Flag anything not yet auto remediated for manual review
Done when The security team's inbox has today's impersonation digest.
How do I get a daily digest of VIP impersonation attempts from Abnormal Security?
WebRun checks Abnormal Security every morning for new threats targeting your executives and finance team, logs each one to a Google Sheet with the sender and technique used, and emails your security team a daily digest. It never blocks a sender or changes a policy itself, so every impersonation attempt still gets a human review.
- VIP targeted threats get reviewed the same morning they are detected
- Every detection has a permanent record with sender and technique
- Already remediated threats are logged, not silently dropped
Built for security teams · IT admins · finance teams · executive assistants
How is each run configured?
Secure by default
Connect once, stays signed in
WebRun signs in once and keeps each session in a persistent environment, so every run picks up right where it left off.
Every action is checked against this policy before it runs.
Questions, answered
Does WebRun quarantine or block a sender itself?
No. WebRun only reads and reports what Abnormal Security already detected or remediated. Blocking a sender or changing a policy is left for your security team.
Does the digest go outside the security team?
No. It only emails your internal security team address. WebRun never contacts the impersonated executive's customers or outside parties.
What if Abnormal Security already auto remediated the threat?
It still logs the detection and notes it was auto remediated, so your team has a complete record even when no action is needed.
Related templates
Akamai›Put this on autopilot.
Turn it on in minutes - or have our team set it up for you.