1
Isolate suspicious workstations or servers from the network without abruptly powering them off.
Emergency cyber assistance
Emergency cyber assistance
Your organization is under attack or suspects a compromise.
AFRISCON can analyze the situation, qualify the incident and support investigation, containment and remediation.
First actions
Before any response work, stabilize the situation without destroying evidence.
These actions help limit initial impact and preserve material useful for investigation. They do not replace your internal procedures.
2
Preserve available logs, emails, screenshots, timestamps and evidence.
3
Disable or reset compromised accounts and block non-essential access.
4
Document the first facts: date, affected systems, symptoms and decisions already made.
5
Avoid deletion, reinstallation or cleanup before evidence has been preserved.
6
Inform the relevant internal owners and keep communication on controlled channels.
Services
Incident qualification
Digital forensics
Log and artefact analysis
Compromise assessment
Containment
Remediation support
Incident intake
Describe the situation without sharing secrets.
The confirmation only means your request has been received. It does not mean an intervention has started.