CypherCon 2024

What to do when it all goes to hell in a hand-basket

Chris Roberts

Abstract:

You know the moment, we ALL know the moment. Our stomach drops, we break out into cold sweat, and we pray to the nearest deity. Unfortunately the next steps CAN be somewhat fuzzy, ill-informed (and ill-advised) and often involve folks running round like headless chickens. A breach situation, ransomware project, or simply a burning building is NOT a good time to see if your Incident Response plan works. (IF you’re fortunate enough TO have one!) We’re going to take the time during this workshop to talk about what you need, arm you with the right checklists, talk through situations, and a HEAP of other things (including a table top or three) We’ll LEAVE you better informed, more aware, and with a better chance of surviving an incident. Consider this a boot camp, 101, or refresher for folks on IR, DR, BCP, DFIR, and all other acronyms we use to describe “one of those days”. This hopefully helps you prepare a LOT more efficiently than reaching for the yellow pages and picking an insurance company and cybersecurity team at random.

Chris Roberts

Lookout!

Chris Roberts hacks wine machines at the pfister