Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Services in Omaha
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated activity that calls for a mix of real-word experience, IT knowledge and business savvy. It also requires close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if any. Because the number one goal of the ransomware victim is operational continuity, it is critical to deploy recovery groups that work effectively, in parallel, and in close communication. Progent offers the breadth of IT skills and the depth of experts to supplement your network staff and recover your network environment rapidly and economically.

Support offered by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the TA's decryption capabilities
• Deciding on an acceptable settlement amount with the victim and the insurance carrier
• Negotiating a settlement and schedule with the TA
• Confirming compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the TA's decryption tool
• If necessary, contacting the TA for technical assistance with the decryption utility

• Quarantining infected endpoints to prevent further spread of the attack
• Creating replicas of each compromised device and data store to allow forensics in parallel with recovery
• Installing anti-virus agents to all virus-free endpoints
• Restoring files from offline restores or uncompromised endpoints
• Creating a pristine environment
• Remapping and connecting drives to reflect exactly their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern strains of ransomware like Ryuk, Maze, Netwalker, and Egregor often try to exfiltrate information. Hackers can then require an additional settlement for not publishing this information on the dark web. Unfortunately, there is no method to be certain that exfiltrated files have been completely deleted by the threat actor. In fact, in many cases the TA has little say over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of seeking the guidance of privacy attorneys, conducting an investigation into which data were stolen, and carrying out the necessary alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises network services throughout the United States for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes professionals who have earned high-level certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned industry-recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial management and ERP applications. This broad array of expertise allows Progent to identify and consolidate the undamaged pieces of your network after a ransomware assault and reconstruct them quickly into a functioning network. Progent has collaborated with top insurance providers like Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Omaha
To get in touch with Progent about ransomware settlement services in Omaha, phone Progent at 800-462-8800 or go to Contact Progent.