Under attack?
Get help now.
If you suspect a breach, ransomware or an account takeover, contact our incident response team straight away. The sooner we're involved, the more we can help contain it.
While you contact us
Four things you can do right now to limit the damage and keep the evidence our responders need.
- 01Do
Isolate, don't switch off
Disconnect affected machines from the network, but leave them powered on. Shutting down can erase evidence held in memory.
- 02Don't
Don't wipe or restore yet
Hold off on reinstalling, restoring backups or deleting files until the scope is understood, or you may destroy what shows how the attacker got in.
- 03Do
Write down what you've seen
Note alerts, ransom notes, unusual logins or messages, and when you noticed each one. Screenshots help.
- 04Do
Change passwords from a clean device
If accounts may be compromised, reset passwords from a device you trust, starting with email and administrator accounts.
Have this ready when we speak
Missing something? Call anyway. We'll work through it with you.
Want monitoring in place before something happens?
Seraph's Security Operations Centre watches your environment continuously and responds when something looks wrong.
Explore SOC services