Sophos’ Peter Mackenzie describes the life cycle of a typical ransomware attack. Mackenzie says attackers often deploy the ransomware overnight when fewer admins are watching, but the actual attack is normally days or weeks longer than that; it does take time to organize these things.” Mackenzie discusses the top tactics criminals use for hitting networks and exfiltrating data; best practices for helping organizations more quickly spot and block attacks; how can organizations get better at detecting and blocking this criminal activity; and how best practices should be used.”]
Source: https://www.govinfosecurity.com/ransomware-strategies-for-faster-detection-response-a-16902