Report includes: Records of the exact time of the attack (beginning to end) Where the attack was initiated (which endpoint) Exactly which files have been affected Who the file owner is Details of how and when the breach was stopped Generates an incident report to key stakeholders With LLoD’s immediate response, most incidents will be considered minor, as only a few files will be compromised before a forced shut down. Customized GDPR reporting ensures you are compliant.

Report

LLoD provides a speedy data-recovery concept. It gives you an exact list of the few files infected before the forced shutdown that need to be restored from your backup. It will reduce any potential downtime by identifying the exact files that need to be recovered, saving you valuable time with minimal cost of recovery. Some of the latest tactics from the cyber criminals are encrypting files without even changing the file name as well as encrypting files in different folders across your infrastructure. This makes recovery difficult and ultimately forces you to restore a full backup and putting additional pressure on the entire organization with operational loss and potentially a GDPR headache. With LLoD your organisation will safely and quickly be operational without having to pay the ransom.

Recover: Remove pressure from the operational team

LLoD stops the attack dead in its tracks LLoD will react within seconds of an unexpected file encryption taking place, alerting the Security Operations Centre (SOC) team, the attacked user, any other key stakeholders and finally notify the local GDPR Supervisory Authority (SA) if required. Alerting is done by email, SMS, IOS/Android app and through integration with most STEM solutions. The alerting and communication also works if you are hosting in the cloud or having an MSP taking care of your IT solution and infrastructure.

Keep your organisation running smoothly LLoD will respond within seconds of any detected ransomware attack, shutting down the infected user/client and stopping any ransomware from spreading into the organization. LLoD will inform you as soon as the attack has been stopped, and the alert level has subsided to normal. Integration through RESTful API to other security solutions such as Cisco ISE and Windows Defender ATP, means your security teams can unify security management across an increasingly complex sea of endpoints. LLoD provides a full damage report, listing all files or folders, you need to recover from backup for speedy recovery of the few infected files that were compromised. With immediate response and a minimum number of files encrypted, it substantially removes the risk of a data breach according to GDPR.

React and Respond

LLoD creates a baseline of all the activity on your systems and in your environment. It simply monitors the network traffic going to and from your network file servers, using heuristics and metadata to discover ransomware swiftly. Artificial Intelligence and Machine Learning automates the initial alert settings, making it ever more sensitive based on your real network activity. In seconds, LLoD provides you with full visibility of any live file changes on your entire network. It gives you visibility on the WEB Dashboard which displays the recording log of any file creation, change, rename or deletion – so in case of an attack – you know exactly which files have been compromised. Often, companies are astonished by the detailed overview of the file changes that take place within their organisation as well as their premises abroad. In case of an attack, you have an advanced playback feature of the history log which allows you to easily study all related details. No other security solution provides you with such detailed and structured overview.

Detect: Detailed live visibility with playback