Learning Ransomware Response & Recovery

Index

Symbols

• 3-2-1 rule, Is Everything Backup?
• 3-2-1-1-0 rule, The 3-2-1-1-0 rule

A

• Accenture attack (2021), Introduction to Detection Systems
• acceptable use policies, Deploying Endpoint Detection and Response Tools
• access control, Access Control and Privilege Management-Enforcing Multifactor Authentication, Restrict database access, Watch Everything: Monitoring Your Backup Environment, Backup System Events and Anomalies
• activation criteria, Full Hot Site
• administrative access logs, Logs for Your Backup Environment
• administrative privileges, Enforce strong user permissions, Implementing the Principle of Least Privilege
• advanced attack analysis (see also attack containment)
  • versus basic analysis, Advanced Analysis Techniques
  • case studies, Step 6: Monitor Dark Web Leak Sites
  • cloud-specific analysis, Expanding Scope Assessment: Cloud-Specific Analysis
  • dark web leak sites, Step 6: Monitor Dark Web Leak Sites
  • negotiating with attackers, Expanding Decryption: Negotiating with Attackers-Exercise: Plan a Negotiation
  • outsourcing services, Advanced Analysis and Forensics
  • post-analysis reporting, Post-Analysis Reporting-Regulatory and Stakeholder Considerations
  • reverse-engineering ransomware, Expanding Identification: Reverse-Engineering Ransomware Samples-Exercise: Reverse a sample
  • role of advanced forensics, Advanced Analysis and Forensics
  • Volatility Framework, Expanding Advanced Analysis: Volatility Tutorial-Exercise: Use Volatility
  • YARA (Yet Another Recursive Acronym) rules, Step 5: Craft YARA Rules (Advanced) ...