Sleeping with the Enemy: A Best Practice Guide for Attacker Engagement

SANS Ransomware Summit 2022

Speaker: Nick Klein, Certified Instructor, SANS Institute

While there are many technical resources available for preparing and responding to ransomware attacks, there's very little practical guidance for one of the most difficult phases of response - how to engage with an attacker, and whether to pay a ransom. We often hear "we'll never pay a criminal" and while this is an idealistic response, organizations need to appreciate the difficult and nuanced issues associated with making these …

best practice guide practice sleeping