Talk With an Expert

Visual Summary of SANS Ransomware Summit 2025

Authored bySANS Institute
SANS Institute

On Friday, May 30, attendees joined us Live Online for the SANS Ransomware Summit!

We invited Ashton Rodenhiser of Mind's Eye Creative to create graphic recordings of our Summit presentations. If you missed a talk or are looking to view the Summit through a visual lens, take a look at the recordings below.

Keynote | Adapting Tradecraft: Examining Ransomware Attacks in 2024 - Insights from The DFIR Report

Presenters: Peter O, Cyber Threat Analyst, The DFIR Report and Angelo Violetti, Swisscom CSIRT

Ransomware TTX: Seven scenarios to include in your next TTX

Gerard Johansen, Principal Security Solutions Specialist, Red Canary

Teams, Scams, and Ransomware: BlackBasta’s Social Engineering Hustle

Partha Alwar, Director, Stroz Friedberg and Kelsey Ward-Van Nostrand, Director, Digital Forensic and Incident Response, Stroz Friedberg

The Ransomware Deployment Life Cycle in Cloud Environments

Arda Büyükkaya, Senior Cyber Threat Intelligence Analyst, EclecticIQ

Panel | What’s New in the World of Ransomware in 2025

Allan Liska, CSIRT, Recorded Future and Selena Larson, Senior Threat Intelligence Analyst, Proofpoint and Danny Quist, CTO, Unit129, Inc

Detecting Initial Access Malware Before It’s Too Late

Hiren Sadhwani, Threat Hunter, Company Inspira Enterprise

Breaking Bad Actors: Transforming Threat Intelligence into RaaS Resilience

Christina Macaire, Senior Threat Intelligence Analyst, PwC and Sohan Lokula, Senior Analyst, Threat Intelligence, PwC