Ransomware Response: The First 60 Minutes

A user opened an attachment. Files started encrypting. The security team had 60 minutes to contain the spread. This is the story of what they did right — and what they'd do differently next time.

A user opened an attachment. Files started encrypting. The security team had 60 minutes to contain the spread. This is the story of what they did right —…