Ransomware Playbook: Illuminating Artifacts for Enriched Analysis

No ratings

Presented at BSides Augusta 2023 by

Fernando Tomlinson

In the relentless battle against ransomware, comprehensive analysis is crucial for effective defense and mitigation. This talk aims to empower attendees with valuable insights and techniques to uncover critical artifacts and enhance their analysis efforts against ransomware attacks. During this session, we will explore the key artifacts left behind by ransomware operations, shedding light on their significance in the analysis process. Attendees will gain a deeper understanding of ransomware techniques commonly employed by threat actors. By leveraging these techniques we will discuss, attendees will be able to extract deeper insights from artifacts and gain a more comprehensive understanding of ransomware operations. By attending this session, security professionals will enhance their ability to analyze ransomware attacks, identify indicators of compromise, and develop effective mitigation strategies. The knowledge and techniques shared will enable attendees to illuminate the hidden artifacts within ransomware operations, leading to enriched analysis and improved incident response capabilities.