13:15-14:00 LESSONS LEARNED FROM CYBER INCIDENTS
Digital Forensics, Incident Response and Operational Resilience
When every system displays a ransom note, is it already too late – or is there still a way forward? This talk presents key lessons learned from digital forensics and incident response (DFIR) during cyber incidents in high-security environments. It highlights the importance of forensic readiness, business continuity planning, clearly defined responsibilities, and close coordination between internal and external IT, legal, operational, and management teams. The presentation also covers common mistakes that can compromise an investigation or delay recovery, as well as cases in which threat actors made rookie mistakes that victims were able to exploit to limit the damage.
Marian Kogler
syret GmbH
