Incident Response
Computer Intrusion Response
Basic Capabilities include , but are not excluded to;
- Forensic Analysis , Acquisition, Analysis etc
- Traffic Analysis && Sniffer Deployments
- Custom Snort Signatures for specific Malware
- Memory Analysis & Computer Forensic Response
- Malware location & Analysis *(Dynamic & Static Reverse Engineering)
- Perpetrator tracking through open source intelligence gathering
Immediate Pricing Information for Quick Incident Response
Previous Case Highlights include;
Case type: System compromise / Incident Response / Intellectual Property Theft
Generic information: Members of an oppressive dictatorial government threaten local businesses by computer based intrusion and political threats. A client needs quick forensics performed as well as an ethical hacker assessment of critical assets to ensure government funded hackers have not compromised critical assets.
Case type: System compromise / Incident Response
Generic information: Computer systems have been compromised and access has been used to lure users of financial systems into giving up their credentials while also utilizing the victims’ computers for a distributed denial of service botnet and selling information to other hacker groups for further system penetration. Involvement included assessing the vulnerabilities exploited while also performing network based forensics to determine the source of compromise and future compromises.
Packetninjas LLC’s immediate Incident response, responds within the 24-36 hour time periods. Within an Incident it is expected that Malware Analysis may need to be performed, Forensic review of more than one asset, Intrusion Detection Signatures developed followed up with reporting to keep critical business processes and management in the know.
