SANS Anatomy of a Ransomware Operation

Presented by

Jake Williams, SANS | Ryan Chapman, BlackBerry

About this talk

Ransomware attacks are no longer “drive-by” events. Encryption is only one of the problems among a list of others that include operational disruption and data exfiltration for extortion, ransom, sale, and re-sale. Join SANS Senior Instructor Jake Williams, SANS Instructor and BlackBerry Principal Incident Response Consultant Ryan Chapman, and BlackBerry Most Distinguished Threat Researcher Dmitry Bestuzhev as they dissect and analyze today’s typical ransomware operation. They will look at initial access, local privilege escalation, lateral movement, and much more, closing with advice on detection and prevention opportunities.

Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (119)
Subscribers (7381)
BlackBerry (NYSE: BB; TSX: BB) provides intelligent security software and services to enterprises and governments around the world. The company secures more than 500M endpoints including 150M cars on the road today. Based in Waterloo, Ontario, the company leverages AI and machine learning to deliver innovative solutions in the areas of cybersecurity, safety and data privacy solutions, and is a leader in the areas of endpoint security management, encryption, and embedded systems. BlackBerry’s vision is clear — to secure a connected future you can trust. For more information, visit and follow @BlackBerry.