This year’s report takes a different approach from previous years, shifting the emphasis from analyzing specific cases to a broader analysis encompassing trends and themes the CrowdStrike Services team encountered while conducting incident response (IR) investigations for a wide range of organizations throughout 2019. The real-world observations and analysis presented in this report should prove both compelling and practical, including recommendations that you can implement in your organization to improve your cybersecurity readiness. The incidents investigated during 2019 span many countries, regions and industry sectors. However, one thing has remained constant: Cyber adversaries continue to be both relentless and innovative in their efforts to find gaps in your organization’s IT infrastructure and exploit them for their own gain.
The findings in this report are derived from data points and insights resulting from IR and proactive services activities over the past 12 months.