Doesn't It Make You WannaCry - Mitigating Ransomware on a Windows Network

Explore the growing threat of ransomware and its impact on businesses in this BSides Tampa 2019 conference talk. Delve into the Petra Ransomware case study, examining its timeline, functionality, and consequences. Learn about multichannel propagation and effective defense strategies for Microsoft networks. Discover key aspects of securing privileged access, implementing attack simulations, and containing threats. Gain insights into best practices for data classification, network isolation, and ransomware mitigation. Understand the importance of offline recovery and communication challenges during attacks. Equip yourself with valuable knowledge to protect your Windows network from ransomware threats.

Syllabus

Intro
Growth of ransomware
Impact on businesses
Petra Ransomware
How did it work
When did it happen
Timeline
How it worked
What it did
How it impacted people
Offline recovery was required
Communications became a real challenge
Multichannel propagation
How to defend a Microsoft network
Business model
Strategy
Attack Simulator
How do you contain them
What can we do
Securing privileged access
Security dependency
Last resort
Best practices
Data classification
Ransomware guidance
Privileged access workstation
Network isolation