Risk and Business Decision-Making in Real-World Security Triage Situations: A Choose-Your-Own-Adventure

Pop quiz hotshot – you’ve just been hit with a security incident – what do you do? In this session, we’ll talk about a real-world ransomware event and the steps that were taken to triage, respond, and recover. We’ll highlight what went right and what could have went better throughout the actual incident response (IR). Participants will leave with tools, techniques, and mechanisms to help with triage, collecting forensics, and most importantly making effective decisions during a security event – as well as several benefits of IR in the cloud.