Course Outline
Understanding the Ransomware Ecosystem
- The evolution and current trends in ransomware
- Standard attack vectors, tactics, techniques, and procedures (TTPs)
- Identification of ransomware groups and their associated affiliates
Ransomware Incident Lifecycle
- Initial intrusion and lateral movement across the network
- The data exfiltration and encryption stages of an attack
- Communication patterns following an attack with threat actors
Negotiation Principles and Frameworks
- Core principles of cyber crisis negotiation
- Analyzing adversary motives and negotiating leverage
- Communication protocols for incident containment and resolution
Practical Ransomware Negotiation Exercises
- Role-playing negotiations with threat actors to simulate real-world scenarios
- Handling escalation and managing time pressure during talks
- Recording negotiation results for future reference and analytical review
Threat Intelligence for Ransomware Defense
- Gathering and connecting ransomware indicators of compromise (IOCs)
- Leveraging threat intelligence platforms to enrich investigations and bolster defenses
- Monitoring ransomware groups and their active campaigns
Decision-Making Under Pressure
- Business continuity planning and legal compliance during an attack
- Coordinating with leadership, internal teams, and external partners to manage the incident
- Assessing the viability of payment versus recovery options for data restoration
Post-Incident Improvement
- Holding lessons-learned sessions and documenting incident reports
- Enhancing detection and monitoring capabilities to prevent recurrence
- Strengthening systems against known and emerging ransomware threats
Advanced Intelligence & Strategic Readiness
- Developing long-term threat profiles for ransomware groups
- Incorporating external intelligence feeds into your defensive strategy
- Deploying proactive measures and predictive analytics to stay ahead of threats
Summary and Next Steps
Requirements
- A solid grasp of cybersecurity fundamentals
- Hands-on experience with incident response or Security Operations Center (SOC) workflows
- Knowledge of threat intelligence principles and associated tools
Target Audience:
- Cybersecurity specialists focused on incident response
- Threat intelligence analysts
- Security teams tasked with preparing for ransomware events
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 2600 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.
