Incident response tabletop exercises are a great way to mature your overall security posture. As with most mock exercises, the more thought and effort you put into the execution, the more you will ultimately get out of it. Today, we explore tips to help improve your next incident response tabletop exercise. 1. Treat it Like […]
In today’s blog, we will do a quick introduction to Ransomware. Ransomware is a form of malware (short for malicious software) designed to deny access to the data on a user’s computer until a ransom is paid. Typically, ransomware is spread via phishing emails, users unknowingly visiting/interacting with an infected website, or weak passwords allowing an attacker […]
Today we’re going to put a bow on our series covering different checklists for things you should be thinking about during each of the 5 primary phases of security incident response. We started with the identification phase and how to adequately capture information about a potential security incident to launch an investigation. We then covered […]
We are approaching the end of our series of blogs that touch on some important items that your organization should consider for each of the phases of the incident response process, including identification, eradication, and containment. This week we touch on the recovery process following an incident, once everything has been contained and eradicated. This […]
As we continue our series laying out some helpful initial checklists for small-medium sized businesses to better prepare for potential security incidents, we’re now moving into the latter half of the six phases of incident response with eradication. After you have contained a security incident and limited its ability to spread, you now have to […]
We’ve written previously about some helpful checklists for small-medium sized businesses about their incident response process in general and for the identification of potential security incidents more specifically. Today, we’re going to continue that train of thought through to the containment process with a security incident containment checklist. The overall process for incident response is […]
There are several phases of a security incident that are important, but first and foremost, the identification that an incident occurred is your first opportunity to gather information and understand what is going on. It’s helpful to have a checklist that employees are aware of to take down some initial information that can help your […]
The prevalence of security incidents and hacking continues to increase, as financially-motivated attackers continue to target businesses with everything from social engineering attacks to data harvesting. Small-to-Medium-sized Businesses (SMBs) remain easy targets due to the ease with which adversaries can launch attacks. These organizations are fighting an uphill battle when trying to protect themselves, as […]
One of the security services that Triaxiom Security offers is Incident Response assistance. We help an organization determine if a breach has occurred, what is the extent of that breach, was any sensitive data exfiltrated, and what was the initial point of compromise that allowed the breach. The scenarios that lead up to a full […]
In one of the most infamous data breaches of the decade, Equifax, one of the nations largest credit reporting companies, discovered unauthorized access to personal information and credit information of over 148 million US consumers. This week, I had the chance to sit down and listen to a podcast that interviewed Graeme Payne, the CIO […]
