MMS 2018

Description:
You get a call on Sunday morning and are told that Azure AD Sync and some other services seems to be down. You do a routine investigation and soon realize nothing is working and all servers and all turned on client has been hit by a ransomware with the result that nothing works, all data is lost, the drives on the backup  servers has been encrypted and deleted, all files on fileservers are encrypted, all database servers are encrypted and so on. Besides panicking, what do you do next? The customer in this real-life-scenario had been hit by a targeted attack (not automated) and turned to us for help. This is the story and lessons learned from not just that incident but also others. You will in this session learn how to recover from a situation like that and get a list of things to do, to mitigate the risk of ending up in a terrible situation like this in the first place. Attending this session may not just save yourself a lot of headache and your job, but also cut down on the recovery time and in the end save your company millions of dollars.

What you will learn:

• The correct procedure to detect issues before an attack is launched
• How to find patient zero
• What you need to have prepared, BEFORE it hits you