Incident Response Support
During an incident, the right sequence matters: contain, preserve, assess, recover. AS provides structured incident response support with recovery expertise built in.
When you need this
- Ransomware encryption in progress or discovered
- Compromised email or admin account
- Suspected data theft
- Malware spreading across the network
- Need evidence for insurers or regulators
What we do
Containment
Isolation of affected systems and accounts without destroying evidence.
Assessment
Scope, entry point and attacker activity established.
Evidence preservation
Forensically sound images and logs retained.
Recovery
Data and systems recovered on clean infrastructure in priority order.
Post-incident review
What happened, what worked, and what to change.
How it works
- Step 1
Protect
Reduce the attack surface: hardening, patching, access controls, endpoint protection and isolated backups.
- Step 2
Detect
Monitoring and alerting so suspicious activity is noticed early, not after encryption.
- Step 3
Respond
A prepared, structured response that contains the incident and preserves evidence.
- Step 4
Recover
Verified, isolated backups and a tested plan so the business can come back quickly.
What affects the outcome
Outcomes are never guaranteed. Every case is assessed on its own condition, and we tell you what is realistic before you commit.
- No control eliminates risk entirely; the aim is to reduce likelihood and impact
- Existing patch levels, configurations and legacy systems that cannot be changed quickly
- User behaviour and the strength of identity and access controls
- Visibility: what is logged and monitored today
- Isolation and verification of backups, which determine recoverability after an incident
Frequently asked questions
Should we shut everything down?
Isolate from the network rather than powering off where possible; power-off can destroy volatile evidence and, in some ransomware cases, recoverable data.
Related services
Not sure what you're dealing with?
Describe the situation and we'll tell you what's realistic.