RE: https://infosec.exchange/@pwr2/117234222332119271 #Pwr2 #LiveWargame #Recommendations ⚔️ 💾 Restoration Recommendations from last week: (sorry for the delay, busy times) - In practice, a middle ground is often chosen: Laptops/clients are completely reinstalled from a master image, but servers often cannot be reinstalled—e.g., Exchange email servers (we do not want to lose all emails). Critical systems like domain controllers, however, often need to be completely reinstalled. The "2 weeks" option is therefore realistic. - To manage the risk of quick backups, extended monitoring is often set up. The "backups+monitoring" option is therefore also feasible. - "Only backups" would be very risky, and a complete rebuild is very expensive. 🛡️ Stay secure. #Cybersecurity #Infosec #DFIR