We got hit with ransomware. We get the call. “Hi, this is Jeff, the COO for Company X. We had a security incident and need some help. Someone referred you to us, and I was wondering if you can help us out. We got hit by ransomware.” Abacode sends a Non-Disclosure Agreement (NDA), a Master Services Agreement (MSA), and a Statement of Work (SOW) for the DFIR support. We always take care of the paperwork first to cover ourselves and our clients. Abacode team kicks off DFIR meeting with client. We learn that, as of midnight, adversaries began encrypting Company X’s data files. When employees came in around 0800, they found systems locked and the following message: This message is from the Maze ransomware group. As our team starts digging into the issue, we discover the worst possible

Join for free to read