Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Indianapolis
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complex activity that requires a combination of field experience, IT knowledge and business acumen. It also calls for close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Because the top goal of the ransomware victim is operational continuity, it is critical to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the deep bench of experts to supplement your IT staff and restore your network quickly and affordably.

Support provided by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware involved in the assault
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Determining a settlement payment with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and schedule with the TA
• Verifying adherence to anti-money laundering sanctions
• Managing the crypto-currency payment to the TA
• Receiving, learning, and using the hacker's decryptor utility
• If necessary, contacting the TA for assistance with the decryptor utility

• Isolating affected endpoints and data stores to prevent further spread of the attack
• Making replicas of each breached device and data store to allow forensics without interfering with restoration
• Adding anti-virus agents to all clean endpoints
• Recovering files from offline backups or unscathed machines
• Creating a pristine recovery environment
• Mapping and connecting datastores to match exactly their pre-encryption condition

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") information. Hackers are then able to require a separate payment for not divulging this information on the dark web. Unfortunately, there exists no way to be certain that stolen files have been completely deleted by the TA. Actually, in many cases the threat actor has limited say about the disposition of the data. Settling an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, performing an investigation into which data were compromised, and sending the required alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite network services across the U.S. for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning application software. This breadth of expertise allows Progent to identify and integrate the surviving pieces of your IT environment following a ransomware intrusion and rebuild them quickly into a viable system. Progent has worked with top cyber insurance providers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Indianapolis
To contact with Progent about crypto-ransomware settlement services in Indianapolis, call Progent at 800-462-8800 or go to Contact Progent.