Part 4: Ransomware Incident Response

Ransomware is a continual threat that requires incorporating material from the three previous parts. The next two chapters will focus on addressing ransomware incidents using tools and techniques that have been covered in previous chapters. These will be augmented with additional tools and techniques that aid in the investigation of ransomware incidents.

This part comprises the following chapters:

• Chapter 14, Ransomware Preparation and Response
• Chapter 15, Ransomware Investigations