#134 - Ransomware Response (with Ricoh Danielson)

A lot of times we focus on preventing ransomware, but we forget what we should do when we actually encounter it.  That's why we are bringing on Ricoh Danielson to talk about it.  Learn from him as he discusses tactics and techniques for businesses to follow then stuff hits the fan.

Special thanks to our sponsor Risk3Sixty for supporting this episode. https://risk3sixty.com/whitepaper/security-program-maturity-presentation-template-for-cisos/?utm_source=cisotradecraft&utm_medium=podcast&utm_campaign=2023-ct&utm_term=1week&utm_content=ebook

Ricoh Danielson - https://www.linkedin.com/in/ricoh-danielson-736a0715/

Transcript: https://docs.google.com/document/d/1R82dUBChC3URM6iaP3D7dds_2nh27DTs/

Chapters

• 00:00 Introduction
• 03:19 How to Help a Small Business Dig Out of Cybercrime
• 05:00 How to Negotiate with Your Cyber Insurance Company
• 08:58 How to Deal with a Threat Actor
• 12:57 The Importance of Treating Everything Equally
• 15:45 How to Use Microsoft Tools to Capture Information
• 17:25 How to Combat a Threat Actor with Microsoft Defender
• 22:41 Set up PGP Keys in Advance
• 25:26 How to Negotiate with an OFAC sanctioned organization
• 28:24 How to Deal with Ransomware
• 30:28 The Nature of Instant Response
• 32:25 How to Get Concurrency in your Organization
• 34:05 The Importance of a a Strong Relationship with a Client
• 37:34 The Importance of Breach Notifications
• 39:21 How to Hand Combat a Threat Actor