Report

Learning from Incident Response: July-September 2023


What You'll Learn:

  • The increasing prevalence of business email compromise (BEC)
  • Ransomware continued to account for multiple engagements
  • Organizations should consider implementing application control features to limit risk of downloading malicious documents

The Secureworks® Incident Response (IR) team plays a critical role in supporting organizations impacted by a security incident. This report from the Secureworks Counter Threat Unit™ (CTU™) research team reviews key observations from IR engagements conducted in the third quarter of 2023.

Knowledge about threat actor behaviors can enable organizations to enhance best practices, make risk management decisions, and prioritize resource allocation.