Digital forensics and incident response

How to quickly recover from IT security incidents

Handling a security breach is not only about containment but also restoring your business operations. At Conscia, we have over 500 skilled engineers that are experts at building secure IT infrastructures and providing managed incident response services tailored to each customer. After an incident has been reported or confirmed, our team quickly and efficiently prevents, limits and/or contains the breach, and repairs the resulting damage.

• Containment services: We provide you with a containment plan for each incident, i.e. a recipe of recommended actions to limit business damage and incident spreading. This plan is tailored to your business capabilities and environment.
• Remediation services: We provide containment services, with additional remediation for each incident. A remediation plan includes a sequence of recommended actions to reverse the technical damage of the incident, to repair affected assets, and to prevent the same incident from occurring in the future. These services can be provided remotely (by phone, videoconference or IM) or at your site, with our experts working to resolve the incident in coordination with your personnel.
• Post-incident services: You may require additional investigation into the incident, either to determine its true scope or cause, to analyse the quality of remediation/eradication, or to investigate other details. We send specialised digital forensics personnel who were involved in the incident response to examine executables (malware), memory/images/filesystems, and network traffic (raw packets, metadata and logs) in order to extract information and behavioural characteristics.

Our managed incident response services are part of Conscia SOC, an advanced managed detection and response tool. These are available to both our managed SOC customers and other organizations with current on-going incidents.