Maya, security lead at Fenwick Manufacturing, builds the eight-layer ransomware defense stack that an operator must pass through to succeed: email and web filtering stops the lure, EDR and attack-surface rules stop the macro payload, MFA and tiered admin stop the stolen admin login, and segmentation stops SMB and RDP spread; behind them, immutable 3-2-1-1-0 backups, mass-file-change detection, isolate-first response and a clean rebuild mean that anything that gets through is survived. On the right, Fenwick's office, servers and plant floor stay protected, with the RDP port that was open for two years closed and no ransom paid.

CY-MID-041Mid Level · Ransomware Defense

Ransomware Defense — The Ransomware Defense Stack

A hands-on mid-level course that hardens an organisation against ransomware end to end. Work the ransomware defense stack - eight layers: Email & Web, Endpoint, Identity, Network, Backups, Detection, Response, and Recovery - closing initial-access paths, stopping lateral movement, protecting immutable backups, and rehearsing recovery. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Close the initial-access paths ransomware uses to get in.
Stop lateral movement and privilege escalation across the network.
Protect immutable, isolated, tested backups from encryption.
Detect early and rehearse a recovery that actually restores.

Price:৳8,000