It seems like your browser didn't download the required fonts. Please revise your security settings and try again.

Understanding Automatic Remediation and Incident Response

  • Last updated on

Review the minimum requirements described in the Forensics & Incident Response.

Example Use Case

Organization A is hit with a phishing attack from outside the company. The IT team is alerted by an internal user who received the email containing the attack. The IT team must do the following:

  • Determine all recipients that received the attack based on the email subject or sender email

  • Alert the recipients that received the email in question that they need to change their password and delete the offending email

  • Create rules to block future emails from this sender or this sender's domain.

The IT team performs Incident Response tasks including:

  • Identifying affected users and providing instructions on updating passwords

  • Creating rules in Barracuda Networks to block future emails from this sender or this sender's domain.

  • Creating rules that block web access to domains found in the email body.*

  • Determining if additional security training is necessary, using Security Awareness Training.*

* This functionality requires any of the currently available Barracuda Email Protection Plans or the legacy Premium or Premium Plus plans.

IRunderstanding.png