Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Rockville
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that requires a combination of real-word experience, technical skills and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance provider, if any. Because the number one priority of the ransomware target is fast recovery, it is critical to deploy response groups that operate efficiently, concurrently, and with intimate collaboration. Progent has the breadth of technical knowledge and the deep bench of personnel to complement your IT support team and recover your network environment quickly and economically.

Support available from Progent's ransomware negotiation team include:

• Establishing the kind of ransomware involved in the assault
• Making contact with the hacker persona
• Evaluating the recovery risk
• Validating the hacker's decryption capabilities
• Determining a settlement with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying accordance with anti-money laundering sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Receiving, reviewing, and operating the threat actor's decryptor utility
• If needed, contacting the TA for technical help with the decryptor utility

• Quarantining affected endpoints to prevent further spread of the assault
• Creating digital copies of every compromised server and endpoint and data store in order to perform forensics in parallel with cleanup
• Installing A/V protection to all virus-free endpoints
• Salvaging files from offline backups or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting datastores to reflect exactly their pre-encryption condition

Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") information. TAs can then demand a separate payment for not divulging this data or selling it. Unfortunately, there exists no way to be certain that stolen files have been completely deleted by the hacker. Actually, in numerous cases the threat actor has limited control over the disposition of the data. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, conducting an inventory of data were compromised, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services throughout the U.S. for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and ERP application software. This broad array of skills allows Progent to identify and consolidate the surviving parts of your information system following a ransomware assault and rebuild them rapidly into a functioning system. Progent has worked with top insurance providers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Rockville
To contact with Progent about ransomware settlement negotiation expertise in Rockville, call Progent at 800-462-8800 or go to Contact Progent.