Hands-On: Ransomware Response and Analysis

Conference:  RSA Conference 2021



The moment ransom notes are found on users' desktops and slack starts lighting up with reports that users are having access problems is not the right time to learn about responding to a ransomware infection. In this lab, learn to set up a ransomware lab and walk through the response from an operational and hands-on tactical perspective. This session will follow Chatham House Rule to allow for free exchange of information and learning. We look forward to participants actively engaging in the discussion, and remind attendees that no comment attribution or recording of any sort should take place. Pre-Requisites: Learners will need consistent internet access, and their own devices. All VMs will be hosted within AWS. Technically, the learner needs to be familiar with command line tools on both linux and windows. And a general understanding of cybersecurity concepts. This is a capacity-controlled session. If added to your schedule and your availability changes, please remove this session from your schedule to allow others to participate.