Ransomware Solutions Consultants

Progent's Ransomware Negotiation Consulting in Winston-Salem
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated activity that requires a combination of real-word experience, technical skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the top priority of the ransomware target is operational continuity, it is vital to deploy response groups that work effectively, in parallel, and with intimate collaboration. Progent offers the scope of IT knowledge and the deep bench of experts to supplement your network support team and recover your network rapidly and economically.

Services offered by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the attack
• Making contact with the hacker
• Evaluating the likelihood of recovery
• Verifying the TA's decryption capabilities
• Deciding on an acceptable settlement amount with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the threat actor
• Checking accordance with anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the threat actor's decryptor utility
• If necessary, contacting the TA for technical help with the decryptor tool

• Isolating infected endpoints and data stores to prevent further progress of the assault
• Creating replicas of every compromised server and endpoint and data store in order to perform forensics in parallel with cleanup
• Adding A/V agents to all virus-free endpoints
• Salvaging data from offline restores or unscathed machines
• Building a clean recovery environment
• Mapping and connecting drives to match exactly their pre-encryption condition

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, current strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate information. Hackers can then demand a separate ransom in exchange for not divulging this data or selling it. Unfortunately, there exists no method to guarantee that exfiltrated files have been totally erased by the hacker. In fact, in numerous cases the threat actor has little control over where the information ends up. Settling an exfiltration ransom does not free you from the need for engaging the guidance of privacy attorneys, conducting an inventory of files were compromised, and performing the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services across the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in foundation technologies including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and ERP applications. This scope of expertise gives Progent the ability to identify and integrate the surviving pieces of your network after a ransomware assault and reconstruct them quickly into a functioning network. Progent has worked with top cyber insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Winston-Salem
To contact with Progent about crypto-ransomware settlement guidance in Winston-Salem, phone Progent at 800-462-8800 or go to Contact Progent.