Incident Response Services

At any moment, day or night, your organization can be victimized by devastating cybercrime. You can’t predict when cyberattacks will happen, but you can use proactive incident response to quickly mitigate its effects or prevent them altogether.

HOTLINE LIST

Emergency Response Hotline

I’m under a cyber attack and need help now!

E-mail:

emergency-response@checkpoint.com

Toll-Free:

+1-866-923-0907

For additional questions to Check Point about the Sunburst attack email to: sunburstattack@checkpoint.com

Want to work with a local partner? Call or email us and we’ll refer you to an expert in your area.

Three Steps to Take in an Emergency

Check Point Incident Response is a proven 24x7x365 security incident handling service. It’s a single hotline phone call away. When you call us we rush into action. We help you contain the threat, minimize its impact, and keep your business running.

Consider these three steps in a cyber emergency:

Preserve the Crime Scene

Collect attack details from your team. Include your assessments of the security attack, how it was discovered, possible cause(s), its impact, and any initial actions you’ve taken.

Contact Us Now

Call us toll-free using the emergency response number listed above. If your country is not listed, please email us and we will respond immediately.
You do not have to be a current client or Check Point customer for this initial contact.

Get Back on Track

We will identify points of compromise, provide daily Active Threat reports, and work with your team to fully eradicate the threat. We’ll also help you communicate the details and ramifications of the attack back to your business and management.

Incident Response Services

Instant Response

Dedicated 24/7 experts respond immediately to any security attack. This includes denial of service, malware, virus, data loss incidents, and more

Speedy Recovery

Accelerate your ability to contain threats, reduce downtime, limit damages and costs, and keep your business running

Mitigate Future Risks

After an incident, we help you apply industry best practices to strengthen your security controls, and provide latest threat intelligence

Prepare

Incident Response Planning
Tailored “Threat” Consulting
Table Top Exercise
Policy Creation
Intelligence Sharing
Attack Surface Evaluation
Customized Threat Management
SOC Training/Playbook Creation

Respond

Attack Mitigation
Full Incident Handling
Malware Forensics
Endpoint/Network/Mobile Forensics
Threat Intelligence
Attack Landscape Analysis
Full Actionable Reporting

Mitigate

Domain Takedown Services
Compromise Assessment
Threat Hunting Engagement
Active Actor Management
Attack Disruption Services

Incident Response Features

Check Point Incident Response is a full-featured service to help you immediately respond to a cyberattack. After full containment, we work with you to strengthen your cybersecurity controls in order to thwart further attacks. Here are a few of the key features:

Multi-threat Analysis

Check Point is the only company to offer insight and remediation for several different types of threats including malware, denial of service, firewall, IPS, applications, data loss, botnets, among others.

Documentation and Guidance

As our customer, you receive detailed documentation and best practices guidelines to improve processes, response speed, and meet compliance and reporting requirements. Included are incident response analysis, remediation, attack profiling, and other information.

Real-time Remediation

Real-time remediation is only possible with access to real-time data. During an engagement Check Point will gather forensics information from the network, endpoint and your cloud infrastructure to determine the threat and provide mitigations for the threat. If you don’t have the necessary remediation, Check Point will provide, where appropriate, the necessary control, free of charge during an incident, such as network sensors, Next Gen Protections, or even cloud mitigations such as O365 controls.

Custom Security Controls

We provide expert recommendations to enhance your security protection. This includes custom signatures, traffic and attack analysis, rule-based protection activations, customized protections, and third-party systems and service provider protection.

The Check Point Incident Response team helped Connexus develop an incident response plan.

“Check Point not only delivered outstanding security solutions and effective management capabilities,” said Rono. “They have helped our entire company build a stronger security posture. That’s the kind of engagement we wanted to protect our systems, operations, and customers.”
– Jon Rono, Group Leader for Technology Services at Connexus Energy

Read The Story