Incident response
A security incident is a race against time. We help you stop the damage, understand what happened and get back to normal, and we help you meet your duty to notify.
Who it is for
Organisations dealing with ransomware, a compromised account, a data leak or any suspicion that an attacker is inside.
What we do
- Emergency response
- We join your team remotely or on site, isolate affected systems, preserve evidence and cut off the attacker’s access.
- Investigation
- We analyse logs, systems and malware to establish how the attacker got in, what they did and which data was affected.
- Breach management
- We help you prepare the notifications required by GDPR and NIS2 and coordinate with authorities and affected parties.
- Recovery and hardening
- We help you restore systems safely and close the gaps that made the incident possible.
- Readiness
- Before anything happens, we write and test an incident response plan with you, including tabletop exercises.
How we respond
Contain
Stop the spread and cut off the attacker without destroying evidence.
Investigate
Establish the entry point, the timeline and the impact.
Eradicate
Remove the attacker’s footholds: accounts, malware, persistence.
Recover
Restore systems and data, and watch closely for a return.
Learn
A lessons-learned report turns the incident into concrete improvements.
What you receive
- Incident timeline and root-cause analysis
- Evidence preserved for legal and insurance use
- Support with regulatory notifications
- A lessons-learned report with concrete improvements
Questions
We think we are under attack right now. What should we do?
Do not switch off or wipe affected machines; disconnect them from the network instead. Then email us with URGENT in the subject line and a phone number we can reach you on.
How quickly must we report a personal data breach?
Under GDPR, a personal data breach must usually be reported to the supervisory authority within 72 hours of becoming aware of it. NIS2 sets its own deadlines for covered organisations. We help you meet them.
Free security tools
-
Email header analyser
Check SPF, DKIM and DMARC results, spoofed senders and the delivery path of an email.
Runs in your browser
Tell us what you need to protect
Describe your environment and what you want to achieve. We will reply by email.
Contact usAngelForce OÜ · Tallinn, Estonia