Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Services in Santa Rosa
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that calls for a combination of field experience, IT knowledge and business acumen. It also demands working closely with the victim's IT team and the cyber insurance carrier, if any. Since the number one priority of the ransomware target is fast recovery, it is vital to deploy response groups that operate efficiently, in parallel, and with intimate collaboration. Progent offers the scope of technical knowledge and the deep bench of personnel to supplement your network support team and restore your network quickly and economically.

Support offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Testing the hacker's decryption tool
• Agreeing on a settlement range with the victim and the insurance carrier
• Negotiating a settlement and schedule with the TA
• Checking adherence to anti-money laundering laws
• Managing the crypto-currency payment to the hacker
• Acquiring, reviewing, and using the threat actor's decryptor utility
• If necessary, contacting the threat actor for technical assistance with the decryption utility

• Quarantining affected endpoints and data stores to prevent further spread of the attack
• Making replicas of every infected device and data store in order to perform forensics in parallel with restoration
• Adding anti-virus agents to all clean endpoints
• Restoring files from offline restores or unscathed endpoints
• Creating a pristine recovery environment
• Remapping and reconnecting datastores to reflect exactly their pre-encryption state

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to exfiltrate files. TAs are then able to require a separate payment in exchange for not divulging this information on the dark web. Sadly, there exists no way to be certain that exfiltrated files have been completely erased by the TA. In fact, in many instances the threat actor has limited control about the disposition of the data. Settling an exfiltration ransom does not free you from the need for getting the advice of privacy attorneys, conducting an investigation into which data were compromised, and carrying out the necessary alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises network services across the U.S. for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have been awarded advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and ERP software. This breadth of skills gives Progent the ability to identify and integrate the undamaged pieces of your information system following a ransomware attack and rebuild them rapidly into a functioning network. Progent has worked with top cyber insurance providers like Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Santa Rosa
To contact with Progent about crypto-ransomware settlement guidance in Santa Rosa, call Progent at 800-462-8800 or go to Contact Progent.