Ransomware Preparation, Containment and Recovery Strategies

Channel:
United States SANS Cyber Defense
Subscribers:
23,600
Published on ● Video Link: https://www.youtube.com/watch?v=a5nnrCY8VX8


Game:
Containment (2018)
Duration: 27:51
2,274 views
69

Ransomware is the most challenging attack blue teamers have dealt with. The ways ransomware attackers work have some key differences compared to traditional espionage attacks. Ransomware causes business disruption which is catastrophic for many organizations. Dealing with ransomware requires swiftness of response, quick decision-making, and implementation capabilities. This talk will walk through a three-pronged approach for responding to ransomware attacks including preparation, containment, and recovery. In this talk, I will share techniques that defenders can use to respond to ransomware propagation in real-time using available tools in organizations.
Anurag Khanna, Manager - Incident Response & Consulting Services, Crowdstrike Services - twitter.com/khannaanurag

View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE
#BlueTeamSummit #Ransomware



Other Videos By SANS Cyber Defense


2022-02-04Visualizing TensorFlow Models: Part 1
2022-01-21Visualizing How CNNs See Images
2022-01-21PowerShell 2022: State of the Art / Hack / Infection
2022-01-14All-Around Defenders: New Year, New Start
2022-01-07Applying DS/ML to Forensics and Incident Response: An Interview with Jess Garcia
2021-12-13What do you need to know about the log4j (Log4Shell) vulnerability?
2021-11-22Get to Know SANS Instructor and SEC586 Course Author Josh Johnson
2021-11-22Bringing the Sexy Back to Blue Team, with Eric Conrad and Seth Misener
2021-11-17Modern Authentication for the Security Admin
2021-11-15DeTT&CT(ing) Kubernetes ATT&CK(s) with Audit Logs
2021-11-13Ransomware Preparation, Containment and Recovery Strategies
2021-11-12Building on the Foundations of OSINT with SEC587: Advanced Open-Source Intelligence
2021-11-12AI & ML in the Modern SOC
2021-11-11YARA for Mere Mortals
2021-11-09Threat Sightings: The Power of Observation for Driving Cyber Threat Detection Improvements
2021-11-07Blue-Team-as-Code: Lessons From Real-world Red Team Detection Automation Using Logs
2021-11-05Measuring Detection Engineering Teams
2021-11-02Monitoring and Incident Response in Azure AD
2021-11-01Threats & Challenges 2021: What Cyber Defenders Need to Know – and Do
2021-10-30Knocking on Clouds Door: Threat Hunting Powered by Azure AD Reports and Azula
2021-10-29Random Forests: Still Useful?


Tags:
sans institute
blue team
blue team operations
sans blue team summit
blue team summit
sans institute blue team summit
Anurag Khanna
ransomware
ransomware containment
ransomware containment procedures
ransomware containment strategies
ransomware containment playbook
ransomware preparation
ransomware recovery
ransomware recovery strategies


Other Statistics

Containment Statistics For SANS Cyber Defense

Currently, SANS Cyber Defense has 2,274 views for Containment across 1 video. Less than an hour worth of Containment videos were uploaded to his channel, making up less than 0.24% of the total overall content on SANS Cyber Defense's YouTube channel.