This presentation provides an examination of an incident response lifecycle for a ransomware attack. Participants will gain insight into the tactics, techniques, and procedures employed by threat actors from initial access vectors to post-compromise activities.
The session will explore the investigative tools and methodologies used to analyze incidents, alongside containment strategies to neutralize threats. Attendees will also examine the critical importance of cross-functional coordination, ensuring that security, IT, and leadership teams operate in concert during high-pressure situations.
Finally, the presentation will outline the essential components of an actionable incident response playbook - one that enables teams to respond with consistency, speed, and confidence.
