Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Houston
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated activity that requires a combination of field experience, technical knowledge and business acumen. It also requires close co-operation with the victim's IT staff and the cyber insurance carrier, if any. Because the top priority of the ransomware victim is fast recovery, it is vital to deploy response teams that work efficiently, in parallel, and in close communication. Progent offers the scope of IT skills and the depth of personnel to supplement your IT support team and restore your network environment quickly and affordably.

Services provided by Progent's ransomware settlement team include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption tool
• Agreeing on a settlement with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the threat actor
• Checking adherence to anti-money laundering laws
• Carrying out the crypto-currency transfer to the hacker
• Receiving, learning, and using the TA's decryptor mechanism
• If needed, contacting the TA for assistance with the decryption tool

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Making replicas of each compromised server and endpoint and data store to allow forensics without interfering with restoration
• Installing A/V protection to all clean endpoints
• Salvaging data from offline backups or uncompromised machines
• Creating a pristine recovery environment
• Remapping and connecting drives to match exactly their pre-attack condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly attempt to exfiltrate information. TAs are then able to require an extra payment in exchange for not posting this data on the dark web. Sadly, there exists no way to be certain that stolen files have been totally erased by the hacker. Actually, in many instances the threat actor has limited control about who can access the stolen files. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, conducting an audit on which files were compromised, and sending the necessary alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises network services across the U.S. for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technologies such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial management and ERP software. This broad array of expertise allows Progent to identify and integrate the surviving parts of your information system following a ransomware attack and reconstruct them quickly into an operational system. Progent has collaborated with leading insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Houston
To contact with Progent about ransomware settlement negotiation expertise in Houston, call Progent at 800-462-8800 or go to Contact Progent.