2 ms·
Firewall it all off. Audit the logs, etc to see how they got in. Fix that. Restore from backups. My main "oh god everything is dead" full system backups pull f
by corobo 5y ago
Firewall it all off. Audit the logs, etc to see how they got in. Fix that. Restore from backups.
My main "oh god everything is dead" full system backups pull from the servers rather than having them push to backup storage. Just in case though I also have individual sites pushing snapshots to write-only S3 with glacier/expiration rules set up as appropriate.
3-2-1 backup strategy on both of these too. 3 copies, 2 different types of storage, (at least) 1 offsite.
Also you do test your backups now and then, right? At least check the filesize. You don't want to find out your zip function has been creating empty zip files for the past 6 months in this situation. That's how I learned to backup properly :P
- matbilodeau 5y agoVery good point, unfortunately what tends to happen : 1. Panic 2. Backups ? 3. Panic 4. Shop for saviors 5. Buy new equipment & software pushed by saviors 6. Pay ransom (or have insurance pay it) 7. Be as opaque as you can (Say nothing, glitches and accidents happen... // direct contact only customers & partners with confirmed affected data // vaguely refer to a cyber incident in financial reports // Creative legal communications plan // etc.)
- corobo 5y agoI don't think I've ever panicked in my life outside of panic attacks (panicking about nothing, ironically). Should be good there.