An Inside Look at a K-12 Ransomware Incident (Part 2)

Resources shared by our guests this episode: https://acpenw.org (ACPEnw Conference) | https://darknetdiaries.com (Darknet Diaries) | https://slashdot.com (Slashdot) | https://www.microsoft.com/en-us/msrc/technical-security-notifications (Microsoft Security Alerts) | https://sans.org (SANS Institute) In this episode of The K-12 Tech Experience, Jake Kasowski is joined by Northshore School District's Senior Systems Engineer, Jon Biggerstaff, and Lead Unix Server Support, Ski Kacoroski. This episode is a follow-up to an https://managedmethods.com/blog/the-k12-tech-experience-podcast-an-inside-look-at-a-k-12-ransomware-incident/ (earlier episode) with Northshore School District's Network Operations Manager, Jon Wiederspan, discussing the district's October 2019 ransomware incident. Jon Biggerstaff and Ski join to share their experience dealing with ransomware and what each had to do technically to help the district recover. Share your thoughts with us on Twitter https://twitter.com/managedmethods (@managedmethods) https://twitter.com/JAKasowski (@jakasowski) or on https://www.linkedin.com/company/managed-methods-inc/ (LinkedIn). Learn more about https://managedmethods.com/ (ManagedMethods). (04:21) - Jon and Ski share what it was like when the team first discovered the ransomware, what was happening, and what they wish they would've done in hindsight. (08:30) - The first steps Northshore's tech team did in response to the ransomware. (10:52) - Rebuilding Active Directory and using LDAP mapping to help recover. (15:17) - Prioritizing which systems get brought back online first. (19:51) - How the rest of the district administrative staff outside of technology felt the impact of ransomware. (22:08) - The unexpected challenges Jon and Ski had to overcome during recovery. (26:29) - The changes Northshore's team has made as a result of the district's ransomware incident. (32:27) - The indicators for school districts to watch for before (and during) an attack and what districts can do proactively to improve thei