What to do in case of Ransomware Attack.

Mukesh Verma — Sat, 02 Jul 2022 15:33:53 +0000

What to do in case of Ransomware Attack.

**
1.Disconnect the infected computer. Isolate the other suspected computers from the network.
2.Check other computer sand servers on the network for the signs of encryption, altered files. In case of doubt disconnect from network. Then scan from anti ransomware package without connecting to the network.
3.Avoid paying Ransomware.
4.Report attack to law enforcement if required.
5.Rebuild your operating system, put all the latest security patches and update definitions of you AV. Don't put the generic accounts/passwords which were used earlier org wide. Attacker might have got these credentials already and he can come back on the new machine if same credentials are enabled in new machines.
6.Check all directly attached network storage for the infections and disconnect them from network.
7.Check for the data exfiltration.
8.Warn users not to open/click any suspicious email, as this can infect their machine.
9.Conduct detailed study that how the attack had happened and what was the initial infection point, what vulnerability was leveraged to further attack the systems and propagate in the environment.
10.Enable MFA for users, if not enabled.

For more information you can also reach me out mukesh@eshieldconsulting.com
http://eshieldconsulting.com

How to make your career in Cyber Security

Mukesh Verma — Fri, 06 May 2022 11:32:32 +0000

Hi I am Cyber Security professional with 12 Plus years of experience and the below certifications

▪ISO 27001:2005 and ISO 27001:2013 (ISMS-LA)

▪CISA (Certified Information Systems Auditor) ( ISACA)

▪CRISC (Certified in Risk and Information Systems Control) (ISACA)

▪CISM (Certified Information Security Manager) (ISACA)

▪SANS 504 Hackers Tools Techniques Exploits and Incident Handling, GIAC GCIH Certified.

▪CISSP (Certified Information Security Professional) (ISC2)

▪CCSK (Certificate of Cloud Security Knowledge (Cloud Security Alliance)

▪CDPSE (Certified Data Privacy Solutions Engineer) (ISACA)

▪OSCP(Offensive Security Certified Professional)

▪ISO27001:2013 ISO/IEC 27001. Information Security Management System 2022

▪ISO/IEC 27701. Privacy Information Management System 2022

▪ISO 22301 Business Continuity Management System. 2022
I am planning to write article for the upcoming hackers. So that people looking for resources can kickstart their career.

After completing education and gaining experience below is my summary which I will recommend to the new comers in the domain.

Cyber Security is big vast subject. One need to build basic foundation of IT and then start with cyber security.

Some of the subdomains of Cyber Security are

1)Information Security Governance and Compliance (ensuring Policy Procedures, are implemented and followed)
2)Vulnerability Management & Penetration Testing (Web, Mobile, Infrastructure)
3)Information Security Monitoring and Response (Monitorring for threats and security incidents in real time and responding)
4)Information Security Risk Management(Managing the Information Security risks for the organization considering external, internal local and regulatory requirements )
There can be further segregation you can see in companies.

Most of the newcomers get attracted towards ethical hacking, bug bounty. This is great but it requires lot of exposures and understanding to do excel and for beginners I will recommend to understand the basics and then jump into it.

Cyber Security is domain where you need to be pushing yourself every days and you need to be aware of what all things are happening in the domain specially for bug hunters, and vulnerability management candidates.

New comers should try and understand basic concept of all the subdomain and then pick one and then start working on it.
If you need any support or help you can reach me out directly at twitter: mukesh_verma_
or mukeshverma@msn.com

This blog is sponsored by
https://mditservices.in
http://eshieldconsulting.com/
http://eshieldconsulting.in/

DEV Community: Mukesh Verma

What to do in case of Ransomware Attack.