ExtraHop #1: Five Ways Attackers Leave Ransomware Vulnerable to Detection

About this opportunity

Enterprise ransomware has evolved. Ransomware-as-a-service and simple-to-use intruder tools like Cobalt Strike give greedy attackers both the motivation and the playbook to search for the data they need to ensure that you will pay. Time may not be on your side, but every action an attacker takes leaves a trail for defenders to follow. This is where you regain the advantage—if you know what to look for. Intrusions are a terrifying thing to consider, but they don’t spell doom: Visibility and response inside the perimeter are your best hope against the enterprise ransomware menace. In this demo-filled webinar, an expert threat hunter will share techniques for eradicating the extortion adversary at each critical phase before encryption begins. Join ExtraHop and (ISC)2 for the first part of a three part series where we’ll look at the indicators that leave attackers open, such as: o Scanning and enumerating your environment o Moving laterally toward your valuables o Domain escalation attempts from owned assets o Staging data exfiltration for second-phase extortion o Preparing to write over DB and file systems