A detailed retrospective on how our incident response team contained, eradicated, and recovered from a targeted ransomware attack on a mid-size logistics firm — and the lessons every security team should take from it.

At 2:47am on a Friday, a mid-size logistics firm’s on-call engineer got the alert every security team dreads: file servers encrypting themselves in real time. Here is exactly how our incident response team contained, eradicated, and recovered — and the lessons every team should take from it.How the Breach BeganThe attacker gained an initial foothold […]