Check Point Incident Response Team analysts will walk you through one of their recent cases.

We'll talk about how the threat actors gained an initial foothold in the environment, how they gained persistence, evaded endpoint protection, how they gained access to credentials and started moving laterally, with the goal of encrypting as many valuable assets in the environment as possible.

By walking you through this case, you'll gain a valuable insight in how such an attack manifests itself in an environment. You will see which every day tools are in the attackers toolbox. We'll discuss observed TTP's and most importantly, you'll gain an insight in which type of security measures were misconfigured or simply not implemented.

On top of that, we'll throw in some solid recommendations that would have helped monitoring or preventing this type of attack.
In the end, it will be clear that there is no silver bullet to deal with these types of attacks and a thorough layered approach is needed to get an insight in such a situation in order to be able to act upon such an incident.

Note: this event is intended for our customers and partners from Belgium and Luxembourg.

Register here