Incident Response and Breach Analysis
We were hacked. Now what? I wonder what they took?
It's a really bad feeling afterwards. Those questions are certainly racing through your mind after a security breech. Due to all of the rootkits that are out, and all of the security vulnerabilies that are traversing the internet, a breach analysis is more valuable than ever. Raxis has extensive experience in cleaning up damage from hackers, script kiddies, and internal security breaches.
Customer Benefits
- Know your enemy- Learn who is performing the attack and why (when feasible)
- Prescriptive roadmap on exactly what systems need to be addressed and how
- Coordinate the restoration of services and system integrity
- Help establish ongoing security to ensure the environment stays secure
Hacker Forensics
Find out what they got access to and what systems were compromised, and then analyze the breach to understand the entry point and specific data that was removed from premise. We rely on system logs, however there are other traces of system evidence that may provide similar specific forensic data that we will utilize to recreate the story. All evidence is handled appropriately to be used for criminal prosecution if needed.
No Repeat Performances
Often once a hacker gets in, your vulnerable server IP address may likely be published on hacker websites and shared across the internet. This normally causes a huge influx of script based hackers and some black hats at attacking you directly after bringing the system back online. Raxis helps by ensure the server is restored to proper security configuration, utilizes proper authenetication setup, and is swept for known rootkits to ensure the hacker is not able to successfully return. In addition, we'll make sure any compensating controls are properly working before closing the case.
Contact us to find out more about Breach Analysis for your business.