VOOZH about

URL: https://www.paloaltonetworks.com/unit42/incident-response/ransomware-investigation

⇱ Ransomware Investigation - Palo Alto Networks


Search

RESPOND & RECOVER

Ransomware Investigation

Your organization has been hit by a ransomware attack. Your files are locked, your applications are down and your business is disrupted. How do you respond to this cyber extortion? Unit 42® security consultants are here to help.

Download the datasheet

Ransomware attack investigations

If you’ve experienced a ransomware attack, Unit 42 can help you:
  • Contain the incident
  • Negotiate with the third-party the terms of the ransom
  • Decide whether or not to pay the ransom
  • Acquire and validate decryption keys
  • Reverse-engineer decryption tools to look for malicious code
  • Identify the point of entry and all malicious activity in your network
  • Develop and implement a recovery plan
  • Monitor systems to stop follow-up attacks

Prepare for a future attack with a Ransomware Readiness Assessment.


WHY UNIT 42

We’ll work closely with you to resolve and recover from attacks

Subject matter expertise

Our teams respond to severe ransomware attacks every day. Whether facing DoppelPaymer, Dharma, Ryuk or another variant, we leverage aggregated threat intelligence and battle-tested methods to minimize costs and downtime.

Read our ransomware report

Crypto liquidity

If you decide to pay a ransom, Unit 42 consultants can guide you through the process of acquiring cryptocurrency. Our mission is to help you quickly contain and recover from ransomware attacks.

Responsiveness

With ransomware, the clock is ticking. We move quickly to help our clients contain and investigate threats, and then coordinate the right response to each one.

Powerful proprietary technology

Our incident response solutions are powered by our industry-first extended detection and response (XDR) technology and are designed to help clients successfully contain and control ransomware-related threats.

UNIT 42 INCIDENT RESPONSE

Expert incident response

  • Rapid deployment

  • Deep forensic analysis

  • Complete containment on time and on budget

  • System restoration and recovery

  • Network monitoring to prevent reinfection

Under Attack?

UNIT 42

Contact Unit 42

If you think you may have been breached, please email unit42-investigations@paloaltonetworks.com or call 1-866-4-UNIT42 to get in touch with the Unit 42 Incident Response team.

To make sure you are prepared for a future attack, contact Unit 42 to get started on a Ransomware Readiness Assessment.

Get the latest news, invites to events, and threat alerts