English
Español
Process
Identification & Triage
Determination of breach scope. Initial analysis of logs, traffic, and malicious artifacts to classify the incident.
Containment & Preservation
Isolation of affected systems to stop attack propagation. Forensic acquisition of evidence for potential legal actions.
Eradication & Analysis
Total elimination of the threat, including backdoors and persistent malware. Deep analysis of the root cause.
Recovery
Secure restoration of services. Detailed report with attack timeline, impact, and recommendations to prevent recurrence.
In a cyberattack, every second counts.
A poorly managed security incident can mean the end of a company. Our team intervenes with surgical precision to regain control, minimize financial and reputational impact, and ensure the continuity of your business against advanced threats.
Key Benefits
Minimization of downtime and economic losses.
Legal validity of digital evidence (Chain of Custody).
When a breach occurs, every minute counts.
One-time incident response
Basic
Includes:
- Incident containment & system isolation (remote)
- Initial root cause analysis
- Malware removal + unauthorised access cleanup
- Post-incident technical report with lessons learned
- Response initiation within 24h of contact
- 30-day follow-up hardening recommendations included
Advanced response with forensics
Pro
Includes:
- Response initiation within 4h of engagement
- Full digital forensic analysis
- Complete system recovery & restoration
- Dual report: Executive (Board) + Technical (IT team)
- Post-incident hardening review session (2h)
- Evidence chain of custody documentation (legal-ready)
- 60-day post-incident monitoring included
Monthly CSIRT retainer
Custom
Includes:
- Dedicated CSIRT team on monthly retainer
- Guaranteed SLA: response < 4h, containment < 8h
- Proactive threat monitoring (IOC + anomaly detection)
- Quarterly incident simulation drills
- Legal notification to authorities handled (AEPD, INCIBE)
- Unlimited incidents covered per month
- Monthly threat intelligence briefing
Frequently Asked Questions
about
Incidents.
Most importantly: DO NOT turn off the computers (RAM would be lost, vital for forensics) and disconnect them from the network immediately. Contact us urgently. Every action you take could destroy evidence or alert the attacker.
It depends on the malware variant and whether decryptors or encryption flaws exist. We analyze the feasibility of recovery without paying the ransom. Ultimately, we advise on crisis management.
Yes. We are forensic experts. Our digital forensic analysis reports include chain of custody, evidence hashing, and rigorous methodology to be presented as expert evidence in legal proceedings.
Yes. Attacks have no schedule. Our incident response team is on permanent standby for clients with support contracts and priority attention for emergencies.