Incident Response – How to Give the Advantage to the Hackers!
summary
Practical incident-response war stories with concrete takeaways: ransomware demands tied to business-impact decisions and the recommendation to get a Coinbase account ahead of time; admin-credential breaches that force mass resets and network segmentation; forensics delays (one case needs 48 hours to spin down data) that cost containment time; staffing rules like the 16/15 rest rule and keeping two to three companies on retainer for burst capacity; and a physical “red button” option to isolate segments — playbooks and checklists are emphasized.
AI-written summary · about
chapters (5)
- 0:00Start
- 1:13Security Incident Response Processes Seven Major Phases
- 2:11Incident Response Team
- 31:44Gain the Advantage
- 38:00Questions?
related talks
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
51mReal World Stories of Incident Response and Threat Intelligence
51mSurvive the Breach-Protecting People & the Company When the Worst Happens
21mRansomware Attack: Lessons Learned
52mHow to prevent cyber-attack, & what to do when attacked?
39mBattle-Tested Incident Recovery: Lessons from the Front Lines
22mCyber...
59mInnovation lessons we can learn from hackers