Table of Contents

    About the Author

    Jon Matthews

    Jon Matthews

    Jon Matthews is a highly experienced and trusted leader in computer and network forensics with over twelve years of experience. He leads investigations around high-profile digital forensic and incident response matters helping clients determine the root cause and extent of breaches. Jon retired from the U.S. Army with over 20 years of service. He was a Special Agent with U.S. Army Counterintelligence for nine years and specialized in digital forensics for espionage and APT investigations. Jon also worked with Aon's Cyber Solutions (Stroz Friedberg) leading their Washington, DC forensic lab and conducting digital forensic and incident response investigations for two and a half years. Education, Certifications, and Training: Jon holds a Bachelor of Science degree in Computer Networks Security from the University of Maryland University College, and holds a Graduate Certificate in Incident Response from the SANS Technology Institute. Jon was a certified Computer Crime Investigator while working in the U.S. Army. His certifications include being a CISSP, Certified Incident Handler, Certified Forensic Analyst, Network Forensic Analyst, Reverse Engineering Malware, Advanced Smartphone Forensics, Certified Ethical Hacker, Secure Infrastructure Specialist, A +, Network +, and Security +.

    More Articles

    Additional Resources:

    CrowdStrike, SentinelOne, and MS Defender: The EDR Trio Powering CyberMaxx’s Advanced Threat Detection

    CrowdStrike, SentinelOne, and MS Defender: The EDR Trio Powering CyberMaxx’s Advanced Threat Detection

    Articles

    5 min read

    Behind the Alert: How EDR Use Behavioral Data to Detect Threats

    Behind the Alert: How EDR Use Behavioral Data to Detect Threats

    Articles

    6 min read

    The Cybersecurity and Infrastructure Security Agency (CISA) has posted a “Shields Up” warning, alerting organizations to the possibility of cyberattacks as tensions escalate between Ukraine and Russia.

    “The Russian government understands that disabling or destroying critical infrastructure — including power and communications — can augment pressure on a country’s government, military, and population and accelerate their acceding to Russian objectives,” CISA wrote.

    Cyberattacks have been a central part of Russia’s playbook in the past, CISA said, particularly in Ukraine in 2015. And while CISA said the U.S. homeland is not now facing any specific, credible threats, Russia could “consider escalating its destabilizing actions in ways that may impact others outside of Ukraine.”

    CISA advised organizations of all sizes to ensure:

    • That personnel use multi-factor authentication when logging on remotely to their networks or for privileged and administrative access
    • Software is up to date to lessen the chances of a cyber intrusion
    • IT departments have turned off any ports or protocols that aren’t needed to conduct business
    • Strong controls are in place if using cloud services

    CISA said any incidents or suspicious activity should be reported to them or the FBI at the FBI’s CyWatch line, at 855-292-3937, or CyWatch@fbi.gov.