Assume Breach

Assume one employee gets hacked. Now what?

After 150+ pentests and thousands of hours inside internal networks, I’ve realized that after an employee or endpoint is compromised, post-compromise risk comes down to three questions.