Technology

59711 readers

5789 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

789

Crypto Scammers Are Targeting Trump’s MAGA Supporters (www.wired.com)

submitted 5 months ago by jeffw to c/technology

140 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] Orbituary 5 points 5 months ago

Quite a lot, actually. This is really a summation and not comprehensive.

Evaluate an environment after incident:
- looking for IOCs, determine spread
- Determine backup status and restore if possible
- Return environment to healthy state (AD restore, replication, networking, etc.,)
- Lockdown of security holes
- Advise on best practices going forward
Decrypt environment if client pays ransom

etc., etc.

Depending on the complexity of the environment, this can take a lot of time and effort: much bigger than most internal teams are capable of doing. A client I had in Feb-Mar lasted a total of 3200 hours of work between 12 people on my team across 34 locations to unfuck the situation.