Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CISA’s Ransomware Guidance Is Reminder to Include AD in Recovery Plan

semperis.com | incident | #cloud | #active-directory | #cisa | #ransomware | #backup | #disaster-recovery | #forest-recovery

Summary

CISA's ransomware guidance is a reminder that recovery plans must cover AD: if domain controllers fall, standard backups aren't enough and forest recovery may be needed—keeping offline, non-domain-joined backups (or cloud copies) is decisive.
Published
Collected

original ↗

Related coverage

blog · semperis.com
The Dos and Don’ts of AD Recovery
Ransomware makes total AD meltdown realistic, but recovery practice has barely changed in 15 years; DXC's Guido Grillenmeier lists AD recovery dos and don'ts—from detailed plans to offline backups.
blog · semperis.com
What’s Active Directory Forest Recovery?
AD recovery comes in levels—object, server, domain, attribute—each harder than the last. The post walks through all four before explaining what forest recovery means and when it is required.
incident · semperis.com
Your Active Directory was compromised, is it all lost? – Part 2
Recovering a compromised AD (part 2): restore from the day-before backup via full forest recovery—hours if automated, four to five business days manually—and tackle the rootkit reinfection challenge.
blog · semperis.com
Backup Testing Is Not Cyber Resilience: Lessons Learned Robbing a Bank
Semperis argues that testing backups under ideal conditions creates only an illusion of resilience; real cyber resilience is about staying recoverable when the plan fails and the assumptions behind it collapse.
blog · semperis.com
Why Recovering Active Directory from a Cyberattack Is an Essential Component of ITDR
Argues AD recovery is an essential, often-overlooked part of ITDR: with 50% of organizations attacked and pen testers exploiting 82% of AD exposures, recovery capability matters as much as prevention.
blog · semperis.com
Active Directory Forest Recovery Introduces New OS Provisioning Tool
Semperis' AD Forest Recovery adds automated OS provisioning for isolated recovery environments, helping rebuild domain controllers faster after an attack while balancing speed and security.
back