EMERGENCY INCIDENT RESPONSE SERVICE

Our 1-866-579-2200 hotline is answered by a live responder 24/7 where the case will be triaged, and resources will be assigned.

We will perform a detailed scoping call to assess the issue and develop potential response strategies. We will inform you of our plan, what you can expect, and when deliverables & findings should be expected.

With eSentire Agent, a market leading technology with remote forensic capabilities, almost all incident response work can be performed very quickly, from a remote location. If onsite resources are required, a minimum of one DFIR specialist will be deployed as soon as possible, in no case later than 24 hours, choosing the most efficient travel option (fly, drive, etc.).

We will provide a complete SOW in the agreed upon format with clear objectives and work requirements.

We will conduct a kick-off call and begin artifact collection and deployment of our toolset across the affected environment. As we collect artifacts from the impacted environment we will begin to normalize, enrich, and analyze the data.

eSentire will deliver findings as to the extent of the attack, the type/variant of malware deployed, and make recommendations as to the isolation/containment of those devices that may have embedded persistence mechanisms or warrant further investigation.

We will set the cadence for technical and leadership update calls. eSentire will deliver updates at a cadence to ensure your needs are met.

We will use our proprietary forensic technology, the eSentire Agent, to rapidly isolate the host devices identified as at risk of further compromise, and those that could be leveraged by an attacker to expand to other parts of the network. Once enabled, our host isolation technology ensures the threat cannot expand, move laterally, communicate with remote servers, or continue to exfiltrate data. Once isolation is enabled, the threat is effectively stopped in its tracks.

eSentire will work with you to build effective remediation strategies. eSentire Responders will leverage their specialized knowledge of attacker tactics and techniques, and their deep understanding of modern malware, to advise you of best practices to consider when remediating the network. We also will provide recommendations that directly address security gaps identified throughout the course of the investigation.