Ransomware Solutions Services

Progent's Ransomware Negotiation Services in Alpharetta
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that requires a mix of field experience, IT skills and business acumen. It also demands close co-operation with the ransomware victim's IT staff and the insurance provider, if there is one. Because the number one goal of the ransomware victim is operational continuity, it is vital to establish recovery teams that operate efficiently, concurrently, and in close communication. Progent offers the breadth of IT knowledge and the depth of personnel to complement your IT support team and restore your network quickly and economically.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware involved in the assault
• Identifying and contacting the hacker
• Assessing the recovery risk
• Testing the TA's decryption capabilities
• Agreeing on a settlement amount with the ransomware victim and the insurance provider
• Negotiating a settlement and timeline with the threat actor
• Verifying compliance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the hacker
• Receiving, learning, and using the hacker's decryptor tool
• If needed, contacting the hacker for assistance with the decryptor tool

• Isolating infected endpoints and data stores to arrest the progress of the attack
• Creating replicas of every compromised server and endpoint and data store to allow forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Recovering files from offline restores or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting drives to match exactly their pre-encryption condition

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate information. TAs are then able to demand an extra settlement for not divulging this information or selling it. Unfortunately, there is no method to be certain that exfiltrated data have been completely erased by the TA. In fact, in numerous cases the TA has limited control about data custody. Paying an exfiltration ransom does not free you from the need for getting the guidance of legal counsel, performing an investigation into which data were stolen, and performing the required notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and onsite network services throughout the U.S. for over 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in foundation technology platforms including Cisco infrastructure, VMware, and major Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and ERP software. This scope of expertise allows Progent to salvage and consolidate the surviving pieces of your network after a ransomware assault and reconstruct them rapidly into a functioning network. Progent has worked with top insurance carriers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Alpharetta
To contact with Progent about crypto-ransomware settlement services in Alpharetta, call Progent at 800-462-8800 or go to Contact Progent.