BEGIN:VCALENDAR
PRODID:-//Google Inc//Google Calendar 70.9054//EN
VERSION:2.0
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:44CON 2026
X-WR-TIMEZONE:Europe/London
BEGIN:VEVENT
DTSTART:20260918T090000Z
DTEND:20260918T095000Z
DTSTAMP:20260624T151157Z
UID:78jiq8jm66d9du5fp4mcvhmk5s@google.com
CREATED:20260624T145005Z
DESCRIPTION:This talk takes attendees inside the first 24 hours of a recent
  ransomware incident affecting a multinational factory environment. Rather 
 than presenting a generic ransomware checklist\, it follows an anonymized r
 eal response: what was discovered first\, what decisions had to be made und
 er pressure\, what could not be trusted\, and how recovery was planned with
 out creating a second compromise. This talk is based on a real ransomware i
 ncident that I personally responded to\, with all client-identifying detail
 s anonymized.\n\nThe session walks through the responder workflow from init
 ial triage to early recovery: understanding production impact\, preserving 
 evidence\, scoping identity and infrastructure compromise\, containing atta
 cker access\, validating backups\, deciding what systems to restore first\,
  and communicating recovery options to leadership.\n\nThe talk focuses on p
 ractical lessons from live ransomware response\, including mistakes that co
 mmonly increase downtime: premature shutdowns\, incomplete identity contain
 ment\, restoring from unvalidated backups\, overlooking remote access tooli
 ng\, and bringing systems online before trust has been rebuilt.\n\nA short 
 hands-on defensive demo will show how the case study methodology can be app
 lied to a simulated ransomware recovery scenario\, including backup trust a
 ssessment\, clean-room restore planning\, and post-restore compromise check
 s.\nAttendees will leave with a practical first-day ransomware response and
  recovery framework they can adapt to their own environments.
LAST-MODIFIED:20260624T145005Z
LOCATION:Track 1
SEQUENCE:0
STATUS:CONFIRMED
SUMMARY:Inside the First 24 Hours of a Ransomware Incident – Johnny Chiu
TRANSP:OPAQUE
END:VEVENT
END:VCALENDAR