Incident Response

We guide you safely through the incident response

Standards & Certifications

"We were able to detect conspicuous traffic on the firewall. This led to hypocritical websites with no traceable purpose. The websites' certificates pointed to untrusted sources."
"One of our employees has fallen victim to a phishing email. The downloaded file was supposedly defused by Endpoint Protection."
"A user clicked on a link to a phishing page and disclosed his credentials. We only noticed this when we recorded logins from this user from other countries/regions on our systems."
"We have noticed abnormal behavior in our web server logs. In the logs, many requests from an IP to certain resource appear, which should not be accessible from the outside."
"Our Endpoint Protection reports that a file has been quarantined. However, the user was working as usual. It is untraceable where this file came from."
"A ransomware message appears on all our screens (see attached photo)."

If there is a fire, call the fire department.
If there is a hacking attack, call us.

Your emergency number for a professional incident response:

+49 (0) 261 450 930 90

Important: If possible, please do not shut down systems prematurely!
This could permanently destroy important information and warn the attackers.

Our mission: Limit damage without blurring tracks

Acute Emergency? We guide you through
all incident response steps.

When you notice anomalies in your network, your intuition may advise you to shut down all systems as a precaution. However, by doing so, you are blurring important tracks and make it more difficult to sustainably process the incident. With our help, you can prevent the attackers from spreading and secure evidence at the same time.

Do you want to prepare for an emergency? We can develop your emergency plan together

Has your company never been attacked by hackers? Then now is exactly the right time to develop a strategy for an emergency. Because the good news is: with the right preparation, no one has to suffer major damage from malware or DDoS attacks.

Want to check if your current emergency plan covers all the steps you need to take?

In this article, we provide key information on intrusion detection, mitigation, documentation and return to normal operation:

PSN_KV_Hacked

Why should you trust us in an emergency?

During an ongoing hacking incident, your business is particularly vulnerable. With an incident response partner for professional support in this situation, trust plays an important role:

Yes, our incident response team consists of IT security consultants and certified penetration testers with many years of experience in this field.

Yes. In the event of an emergency, we will promptly send a Mobile Incident Response Team to you to take over crisis management and coordinate action steps.

Yes. As a matter of principle, we adapt our services individually to the current situation and the available resources of our customers. We work on networks, but with people, and share our knowledge as transparently as possible - such as in the Knowledge Base article linked above.

Yes, we offer all IT security-related services from a single source:

We can answer "yes" to all these questions with a clear conscience.
Trust is good, control is better.
Contact us and convince yourself personally.
Contact us

Have you just been hacked or do want to prepare for this eventuality?

Then learn everything you need to know about ProSec's Digital Forensic Incident Response (DFIR) services here.

INCIDENT RESPONSE

Well prepared for the emergency
Do you notice acute abnormalities in your network and need quick help from experts? Or do you want to prepare for an emergency and need support in drawing up an emergency plan?
Our specialists will help you quickly and without complications.

IT FORENSICS

Emerge stronger from a cyber attack
The topic of IT forensics is about the processing of a (successful) hacking attack. The focus here is on

● Efficient mitigation
● Professional documentation and
● Use of findings for security hardening.

Go to page

THREAT INTELLIGENCE

We look closely
It makes a difference to your future threat posture whether you happen to be the victim of a mass ransomware attack, a lone perpetrator specifically targeting you, or an inside perpetrator.
We analyze and evaluate your incident in detail.
Go to page