Explore incident management, which begins as soon as an incident is reported and continues until operation has resumed normal activity. When dealing with a ransomware attack, learn how the team should respond quickly and follow a few suggested guidelines.
- [Narrator] An incident is something that disrupts…operational or day to day activities.…Incident management is responding to a disruption…in information technology services or business processes.…Managing an incident begins as soon as it is reported…and continues until operation has resumed normal activity.…A ransomware attack is no different.…Let's review some incident management guidelines…when dealing with a ransomware attack.…
If someone calls to report a possible ransomware attack,…remain calm and respond quickly…to prevent further escalation.…Identify the primary infector by locating…the file owner's account that deployed the ransomware…and then which computers on the network…are using that account.…Contain by disabling the ability for that account…to access shares and physically remove…the infected computer from the network.…
Determine if the victim is the main or unintended target.…Identify a scribe to document all activity.…A record of the ransomware attack might be needed…when discussing the incident with law enforcement.…
- How ransomware works
- Types of ransomware
- Safeguarding Windows
- Securing your router
- Updating software and operating systems
- Spam, phishing, and spoofing
- Reporting ransomware
Skill Level Beginner
Ransomware: Practical Reverse Engineeringwith Malcolm Shore1h 22m Intermediate
Malware: Defense and Responsewith Scott M Burrell40m 46s Intermediate
Windows Performance Toolkit: Malware Analysiswith Thomas Pantels1h 4m Intermediate
1. Ransomware Overview
2. Types of Ransomware
3. Safeguarding Windows
4. Good Practice
Next steps1m 25s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.