Opening The Playbook; What to do when you've been hacked
summary
Evernote traces a 2013 intrusion that exposes 50 million users after attackers leverage prior leaked credential lists to crack hashed and salted passwords; detection triggers a honeypot diversion and a rapid incident playbook rollout. Administrators already have two‑factor auth but rollout was delayed by token timeout bugs; password resets to all users take 48‑hour password reset batches, support volume spikes 2k to 20k tickets per day, FBI seizes equipment, and post‑breach 2FA adoption sits near 2%.
AI-written summary · about
chapters (25)
- 0:00Start
- 0:23Opening the Playbook What To Do When You'Ve Been Hacked
- 4:52Largest Breaches in Internet
- 8:03Bugs on Two-Factor Authentication
- 9:23Security Incident
- 11:51Set Up some System Alerts
- 14:39Patching the Server
- 17:49How Long It Takes To Send 50 Million Emails
- 19:19Support Request Volume
- 21:28Set Up a Network Monitoring and Alert System
- 24:35Responsible Disclosure Program
- 25:37Response Team
- 27:15Investigate Unusual Traffic
- 27:29Look into Administrator Probes
- 32:51Preserve Your Computer Logs
- 34:35Legal Obligations
- 37:50Figure Out What Your Remediation Efforts
- 38:26Public Inquiry Response
- 40:16Analyze Legal Obligations
- 43:02Post-Breach Legal Issues
- 44:48Did We Practice Our Disaster Plan
- 51:57Do You Utilize Strong Passwords
- 52:21Resources for Incident Response Tools
- 52:59Questions
- 58:20Was the Hacker Identified
related talks
21mA Playbook for Effective Corporate Communication After a Cyber Security Incident
46mRequiem for the Password
40mIncident Response – How to Give the Advantage to the Hackers!
49mBeyond Takeover: Attacker’s in. Now what?
31mLog In Through the Front Door: Automating Defense Against...
43mEVE Online: Defending our players from hackers
37mData Breaches: Barbarians in the Throne Room
46mKeynote: Lessons From 11 Billion Breached Records