~/talk

Experience a simulated ransomware event: Learn now to prevail later

Talkat AWS re:Invent 2023 · 2023-11-27..12-01· [security, devops-and-delivery]
links:none on file
slides:none on file

A simulated ransomware run-through drops a $1B+ retailer into a real-time crisis: e‑commerce down nine hours, losses climbing to about $3–5M, ransom rising from $1 million to $1.5 million, and backups showing encryption and reinfection. Analysts use CrowdStrike, IOC/YARA hunting and Iron Mountain tapes while discovering a stale CMDB and evidence pointing to the Platypus gang; manual store checkouts cause 75% sales loss. Rubrik’s Rapid Response approach scans backups for IOCs, detects encrypted snapshots, and isolates clean copies for staged restores.

AI-written summary · about

  1. 0:00Introduction and setup
  2. 7:01Discovery of ransomware attack
  3. 20:49Restoration without knowing the threat
  4. 31:47Boardroom pressure and legal impact
  5. 37:13Single to triple extortion explained
  6. 45:01Advanced persistent threats vs ransomware gangs
  7. 47:30Denial of data attacks and long-term costs
  8. 53:13Q&A and next steps
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.