Ondrej Krehel: Too many organizations erase crucial forensic evidence when dealing with cyber extortion. Krehel says organizations need to take a big step back, think carefully about how to proceed. He says every piece of electronic information is actually evidence because it can help investigators “find out what happened, how it happened, what data had been exfiltrated, and what the intentions of the attackers really were” Krehel was the CEO of LIFARS, a digital forensics and cybersecurity intelligence firm.”]
Source: https://www.cuinfosecurity.com/facing-cyber-extortion-step-1-dont-panic-a-9308