Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Edmonton
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex activity that calls for a combination of real-word experience, IT knowledge and business savvy. It also demands working closely with the ransomware victim's IT team and the cyber insurance provider, if any. Since the number one priority of the ransomware victim is fast recovery, it is vital to establish response teams that work efficiently, in parallel, and with intimate collaboration. Progent has the breadth of technical skills and the depth of personnel to supplement your IT support team and restore your network environment quickly and economically.

Services offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the assault
• making contact with the hacker persona
• Assessing the recovery risk
• Testing the threat actor's decryption capabilities
• Determining a settlement range with the ransomware victim and the insurance carrier
• Negotiating a settlement and timeline with the TA
• Confirming accordance with anti-money laundering (AML) laws
• Carrying out the crypto-currency payment to the TA
• Receiving, reviewing, and using the hacker's decryption utility
• If necessary, contacting the hacker for technical assistance with the decryptor utility

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Making digital copies of each compromised server and endpoint and data store to allow forensics without interfering with recovery
• Installing anti-virus agents to all virus-free endpoints
• Recovering files from air-gapped restores or uncompromised endpoints
• Building a clean recovery environment
• Remapping and reconnecting datastores to match exactly their pre-attack state

Exfiltration Ransoms
In addition to extorting money for a decryption tool, current variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate files. TAs are then able to demand a separate payment in exchange for not divulging this information on the dark web. Sadly, there is no method to guarantee that exfiltrated files have been totally deleted by the hacker. Actually, in many cases the TA has limited control over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of privacy lawyers, performing an investigation into which files were compromised, and sending the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services across the United States for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have been awarded advanced certifications in foundation technology platforms including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning applications. This breadth of skills allows Progent to identify and consolidate the surviving parts of your network following a ransomware intrusion and reconstruct them rapidly into a viable system. Progent has collaborated with leading cyber insurance carriers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Edmonton
To get in touch with Progent about ransomware settlement services in Edmonton, call Progent at 800-462-8800 or go to Contact Progent.