Get an iPad mini, ASUS ZenScreen LED Monitor, or $350 Off with OnDemand Training thru 5/19


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

LOCKED OUT! Detecting, Preventing, & Reacting to Human Operated Ransomware

  • Monday, October 12, 2020 at 1:00 PM EDT (2020-10-12 17:00:00 UTC)
  • Ryan Chapman

You can now attend the webcast using your mobile device!



Human Operated Ransomware (HORA) threat groups are growing in number and strength every day. In this Webcast, SANS Instructor Ryan Chapman will cover the evolution of, tactics inherent to, and threats associated with HORA. Ryan will provide "quick wins" that you can implement now to protect yourself against this ugly threat. Ryan will also focus on what to do if ransomware is running *right now*, along with what to do when ransomware has run and the outlook is bleak. Ryan will wrap up the Webcast with a list of digital forensics and incident response tools that work well within on-prem and cloud-based environments alike. Are you and your company prepared for this looming threat?

Speaker Bio

Ryan Chapman

Ryan Chapman is a hacker, consultant, speaker, and trainer. He works as a Principal Incident Response Consultant for BlackBerry (formerly Cylance). Ryan also teaches SANS FOR610: Reverse Engineering Malware and is the lead organizer for CactusCon, Arizona's hacker conference. He has a zest for life-long learning and loves to present, having presented talks and workshops at conferences such as DefCon, BSides, CactusCon, Splunk .Conf, and more. With Ryan, it's all about the blue team!

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.