Incident Response

Even the most prepared organizations can be confronted with security problems in their computing environment. MANDIANT consultants apply their blend of investigative and technical skills to help you solve the problem with minimum disruption of the business process. These include:

Rapid Incident Response

MANDIANT helps clients identify the nature and extent of an incident, then quickly builds an effective mitigation plan. We work alongside your staff, conducting hands-on response and remediation.  Supplementing this tactical response with strategic guidance minimizes our clients' risk exposure. 

.Learn more

Malware Analysis

We have extraordinary expertise and experience in identifying the impact of unknown code on your enterprise. We are able to perform rapid, dynamic analysis of hostile Windows and Unix programs in order to profile network- and host- based indicators of compromise. This analysis lets us identify the scope and intent of the malicious code to find and eradicate malware that antivirus misses. 

Incident Response Program Development

Because of MANDIANT's extensive experience responding to hundreds of computer security incidents, we understand the tools, techniques and approaches that result in successful incident response. MANDIANT's consultants can build new or enhance existing Incident Response programs to meet regulatory and industry requirements. These projects span policy and process development, business unit involvement and buy-in, executive and staff awareness training, Incident Response exercises and customized training. 

Learn more

Incident Response health check

MANDIANT's Incident Response Health check provides clients with a comprehensive assessment of their existing Incident Response capabilities, processes and tools.  This allows us to develop specific, cost-effective recommendations for improvement. 

Learn more

Incident Response Exercises

We help clients develop their hands-on response skills using simulations based on real incidents.  MANDIANT provides table-top policy driven events and detailed technical events that allow your team to execute your existing incident response procedures and update your program. We complete every exercise with a lessons learned discussion to enhance skill development.

incident response:  Lessons from the cyber battlefield

Lessons from the Cyber Battlefield is an interactive seminar led by industry veteran and MANDIANT CEO Kevin Mandia.  This seminar highlights the top threats facing your IT infrastructure, how these incidents have affected similar organizations, and what you can do to minimize risk to operations. 

Learn more

IR Case Studies

MANDIANT Education

MANDIANT Intelligent Response