INCIDENT RESPONSE SERVICES

Unit 42 Retainer

With a Unit 42 Retainer in place, our experts become an extension of your team – well-versed in your environment so they can respond quickly and accurately should an incident occur. Put us on speed dial, and we’ll be ready to assist at a moment’s notice.

Read the 2023 Unit 42 Ransomware and Extortion Report

Download datasheet

Benefits
Service Features
Methodology
Why Unit 42

BENEFITS

Initiate your response within minutes

The clock starts immediately after identifying a potential breach. But if you can’t determine the root cause and contain the breach right away, your adversary will be back in your environment again in no time. A Unit 42^® Retainer means our incident response team is on speed dial, helping you respond faster so you can minimize the impact of an attack and get back to business sooner.

Recover faster

Because you will have an assigned point of contact with knowledge of your environment and dedicated communication channels for engaging the team, we can respond faster and more accurately should an incident occur.

Add predictability to incident response

With the Unit 42 Retainer, you purchase a set number of prepaid credits that fit your budget and cybersecurity needs. The retainer lets you choose your response-time SLAs to align with your existing SecOps and IR capabilities, budgets and strategy.

Mitigate cyber risk

If you don’t use all of your retainer credits for incident response, you can apply them toward any Unit 42 Cyber Risk Management Services to proactively assess and test your security posture before an incident happens.

Unit 42 threat-informed incident response

SERVICE FEATURES

Put Unit 42 Experts on Speed Dial

With a Unit 42 Retainer in place, our experts become an extension of your team – available on speed dial – any time you need assistance.

PREPAID CREDITS

SLA-DRIVEN INCIDENT RESPONSE

PREARRANGED COMMUNICATION CHANNEL

ACCESS TO CYBER RISK MANAGEMENT SERVICES

PREDEFINED PROCESSES AND PLAYBOOKS

METHODOLOGY

An intelligence-driven approach to incident response

SCOPE

Define engagement scope

Assess the breadth, severity and nature of the security incident.

INVESTIGATE

Fully understand the incident

Our experts use advanced tools for evidence collection, detection and analysis to flag IoCs, TTPs and other clues.

SECURE

Contain and eradicate

We remove the threat with custom eradication strategies and provide 24/7 monitoring against new malicious activity.

SUPPORT & REPORT

Findings and response assistance

Get a detailed investigation report as well as guidance in implementing additional security controls while you get back on your feet.

TRANSFORM

Improve your security posture

Use lessons learned and apply specific improvements to your security approach to protect against future and similar attacks.

Threat Intelligence

WHY UNIT 42

World-renowned security experts, always in your corner

As an industry-leading threat intelligence, cyber risk management and incident response organization, it's our job to help you prepare and respond to some of the most challenging threats so that your team can get back to business faster. As threats escalate, we act as your trusted partner to advise and strengthen your security strategies.

WORLD-CLASS THREAT INTELLIGENCE

Unit 42 provides access to one of the world’s largest and most experienced threat intelligence teams. Our team of more than 200 cyberthreat researchers includes threat hunters, malware reverse engineers and threat modeling experts who enable you to apply a threat-informed approach to prepare for and respond to the latest cyberthreats.

TRUSTED EXPERTISE & EXPERIENCE

Unit 42 has assembled an experienced team of security consultants with backgrounds in public and private sectors who have handled some of the largest cyberattacks in history. We manage complex cyber risks and respond to advanced threats, including nation-state attacks, APTs and complex ransomware investigations.

INDUSTRY-LEADING TOOLS

Unit 42 security consultants leverage industry-leading Palo Alto Networks tools to jumpstart your investigation by gaining necessary visibility across your endpoint, network, cloud and third-party data. This enables you to develop and execute a plan to get back to business as quickly as possible following an incident.

Related resources

See all resources

CASE STUDY

Unit 42 Secures Medical Device Manufacturer After Network Breach

Read now

BLOG

7 Ways an Incident Response Retainer Can Increase Security Resilience

Read the blog