Ransomware

App version:

v1.2

Supported platform version:

empow 1.9

Community rating:


Description:

The Ransomware App is designed to orchestrate and optimize the organization’s security tools to conduct detection, investigation and mitigation operations against campaigns that attempt to break into data services that store sensitive information and encrypt it for ransom purposes. Ransomware attacks are multi-stage and often share basic stages, such as phishing campaigns, intrusion to the network, first infection and the communication between the malware and its operator (C2) for key exchange. By detecting these early stages of an attack, and investigating for further indicators of the threat, the Ransomware App uses the platform’s mitigation service to disable the C2 communication or malware download channel, thus breaking the attack chain and preventing it from actualizing its purpose.

Request a customized demo

We’ll show you how we can quickly and economically
turn what you have into what you need.