Playbooks for critical infrastructure.
Common Malware scenarios – Infected USB flash drives, Notebook computers used for maintenance, Project files or executable applications containing malicious code. What are the best practices to handle these incidents?
Attacks related to Industrial Control Systems are complex. There is an urgent need to share information, get support for incident analysis and mitigation, and coordinate messaging for incidents that require communication with customers and the public.
Brute-force and dictionary attacks against remote services such as SSH, are one of the Top-20 most common forms of attack on the Internet that compromise servers. In particular, Unix-based and Mac OS X servers that run an SSH service to allow administrators secure remote connections are at risk. Playbook Mitigation Disable root access – It is a good security practice to disable logins via SSH […]
The Malware (Malicious code) response procedures will include validating malware, understanding the impact, and determining the best containment approach.