What happens when attackers breach two sites of the same company within 60 minutes on a Saturday night? This episode walks through a real incident response where Huntress SOC alerts caught credential dumping and lateral movement in progress — and how 24/7 monitoring stopped what was likely a ransomware attack before it crippled the business.

Key learnings: • Why abandoned POS machines with open RDP ports became the attack vector six months after decommissioning • How Mimikatz and WebBrowserPassView extracted both Windows and browser credentials within the first hour • What application whitelisting would have blocked that antivirus missed entirely

Check out the free ACSC Essential 8 self assessment audit tool. After completing the audit, you will be have a bespoke action plan, based on your type of business and your current security measures to achieve the right ACSC Maturity Level for your business.

Cyber Security 4 Small Business is a set of resources to help small business owners understand the Cyber Threat and be able to defend their network in the most cost-effective way possible.

We believe that 95% of Cyber Security and Cyber Resilience can be achieved through good systems administration and good processes, without all the expense of engaging cyber security experts.

Check out the show notes for this episode.