Incident response to Computer and Cyber Security events is one of CYFORT’s main services and areas of expertise. Our team’s experience encompasses investigating large-scale intrusions performed by advanced threat groups. CYFORT’s experts utilize their proprietary tools and techniques that allow them to:
- Identify the actions of the attacker
- Assess the scope of the compromise as well as the data losses
- Define the steps required to remove the attacker
- Define the approach required to re-secure the network.
CYFORT’s consultants have performed investigations of a multitude of Incidents involving
- Sensitive data theft from industry, military and governments.
- Fraud events including Payment Cards, cash transfers and insider fraud attempts
- Internal investigations including systems used by employees, board members and other insiders suspected of inappropriate or unlawful activity.
We help organizations recover from a computer security event while minimizing the impact of the event on the organization. Our methodology includes several steps: