Services

Incident Response & Ransomware Recovery

When an incident is live, the priority is containment and getting the business back — analysis comes after.

Capabilities

Incident Response & Ransomware Recovery across your estate

Containment, eradication, recovery and forensic analysis, following the NIST SP 800-61 lifecycle. Ransomware work includes backup validation, decryption feasibility and clean rebuild guidance.

Ransomware Recovery
Containment, eradication and recovery during a live ransomware event, following the NIST SP 800-61 lifecycle, with getting the business running treated as the first objective and analysis as the second.
Methodology and deliverables
Digital Forensics
Evidence-grade investigation of systems, accounts and data movement, with chain of custody maintained throughout so findings hold up in a disciplinary, regulatory or legal process.
Methodology and deliverables
Compromise Assessment
A structured hunt across the estate for evidence of a current or past intrusion, answering the question nobody can answer from their dashboards: are we compromised right now.
Methodology and deliverables

Incident Response & Ransomware Recovery

Ransomware Recovery

Digital Forensics

Compromise Assessment