Ransomware: getting the first 72 hours right
Tickets
Ransomware: getting the first 72 hours right
What to do in the 72 hours following a ransomware attack? Detection, isolation, backup restoration and recovery on isolated cloud desktops — the process, demonstrated.
📅 Wednesday, April 21, 2027 · 17:00 (Morocco) / 12:00 (Montreal) · 30 minutes
Monthly webinar — third Wednesday of the month. Online on Zoom, waiting room enabled, Q&A at the end of the session.
A ransomware attack is decided not by the tool that stopped it, but by the decisions made in the hours that follow. Do we back up fast enough? Can we isolate the network without shutting down operations? How do we keep teams working during restoration? Organizations that bring a network back into service within 72 hours prepared these answers before the incident.
What you will learn:
- The stages of the first 72 hours: detection, containment, scope assessment, restoration and return to production.
- The 3-2-1 backup rule and restore testing: what to check before the incident, not during it.
- Recovery on isolated cloud desktops, accessible from a browser, while the information system is being restored.
Who it's for: mid-sized and large enterprises — CIOs, security managers and executive management who must document a response plan. Discover Wazuh SIEM/XDR services.
Meeting ID: 84741785396 — Passcode: gP1PAV
Direct link: https://us05web.zoom.us/j/84741785396?pwd=hzTHBylOtcgKXbP0bwiVEvzJw6bvFe.1
Learn more: https://openvista.ma/wazuh