An Incident Response-Driven Case for Dark Web Monitoring

The factors influencing important business decisions, such as deciding whether to pay a ransom demand, are rarely black-and-white. Relevant factors here include the viability of backups, IT teams’ surge capacity, and the effectiveness of business continuity plans to bridge gaps until recovery is complete. 

In such situations, consider engaging a specialized monitoring service that provides “deep web” (parts of the web not indexed by search engines) and “dark web” (sites accessible only through encrypted, anonymized networks such as Tor) capabilities. The additional visibility may enable leadership to consider options – such as proceeding to recover using viable backups and not paying the ransom – that may otherwise be more difficult to stomach. The following sources may contribute relevant intelligence and capabilities to enhance decision making: 

• Open web and social media monitoring 
• Identifying indications on public sites, such as Twitter, of threat actor activity or a forthcoming data leak 
• Dark web forum monitoring focused on sites where information stolen in such attacks is known to be traded 
• Domain registration activity 
• Registration of a new domain name that appears at a quick glance to be associated with the organization could be a precursor 

What to Expect

• Simplified procurement as part of an overall MOXFIVE engagement 
• Integration with MOXFIVE Incident Management or Technical Advisory Retainer services 
• Accelerated time-to-value through MOXFIVE preparing our partner with an understanding of the unique aspects of the environment and the dimensions of the current incident 

Benefits of Working with MOXFIVE

IT & Security Expertise
On-Demand
With a deep understanding of both IT operations and security, MOXFIVE Technical Advisors can provide the expertise you need and help determine the most efficient and cost-effective solution.
‍
Access to Experts at Scale
MOXFIVE maintains an ecosystem of the industry's best technology experts and service providers so we can quickly assemble the right team with the skills you need.

Streamlined Process
MOXFIVE manages the selection, implementation and procurement processes to keep projects on schedule and minimize disruption. 

Resilient Outcomes
MOXFIVE identifies gaps between business, IT and security objectives to build a more resilient environment.