Ransomware on one laptop
Hard · Whiteboard
At 9am, an employee's laptop shows a ransom note and files on a shared drive start getting renamed with a new extension. Draw your incident response plan for the first hours: containment, investigation, recovery, and communication.
Create a free account to answer it and get scored on what a strong answer covers.