FortiGuard Incident Response Report H1 – 2023

The FortiGuard Incident Response team provides both proactive and reactive incident response services, which are platform-agnostic and available to all organizations across the globe. Incident response teams like ours get unique exposure to attacks and threat vectors compared to many teams working in the cybersecurity field as we are often involved in investigating incidents where the victim’s defenses have failed. 

The experience taken from working alongside these victims in investigating, containing, and evicting adversaries provides actionable insights into what weaknesses resulted in a breach and what is effective at removing them. 

Download this report to see the many insights, human and procedural contributing factors, as well as observations and trends in adversary tradecraft across a range of intrusions from across the globe.