TechTalk
Having previously made a name for itself on the criminal scene by attacking major companies such as Quanta Computer and Invernergy, REvil's latest attack on software company Kaseya and its update service is believed to have affected several hundred companies worldwide.
In the event of an attack, companies should take appropriate countermeasures with professional help. The tool of choice here is Digital Forensics & Incident Response (DFIR).
In addition to the expected IOCs for the ProxyLogon/Hafnium vulnerability, our analysis identified one IOC of another vulnerability.
Log management describes the centralized storage of event logs and the ability to search and analyze this data. The benefits of a solid log management solution are manifold and span different areas.
With Compromise Assessment, the traces of cyber attacks can be detected and, ideally, high damage can be prevented.