Redacted Incident Response Services is a consulting and managed service offering that assists organizations in responding to and recovering from cybersecurity incidents. The service is available on an as-needed basis or through a retainer agreement. Core activities include: - Collection and triage of logs and artifacts from impacted networks - Deep technical analysis of disk and memory images, malware, and other evidence sources - Root cause identification following a cyber incident - Development, rehearsal, and communication of incident response plans - Dark web monitoring and search using special data sources - Analysis of an organization's public-facing footprint for weaknesses and misconfigurations The service is designed to serve organizations of varying sizes, including smaller organizations with limited security budgets. For these clients, the focus is on restoring networks as quickly as possible without a long-term commitment. For clients on a retainer, Redacted conducts monthly meetings to discuss security issues, proactively work to prevent potential problems, and manage incident resolution. The retainer model is intended to build an ongoing relationship with the client. Additionally, the service includes a training and education component, where Redacted helps gather training requirements, develop security curricula, deliver content, mentor staff, and develop exercises and scenarios to improve organizational security posture over time.