CYBER FRONT LINES REPORT
Incident Response and Proactive Services From 2020 and Insights That Matter for 2021
INSIDE THE REPORT
Take a peek at just a few of the major insights and trends uncovered in the Cyber Front Lines report.
Attacks that were financially motivated, including a high proportion of ransomware
Organizations that had antivirus solutions incorrectly configured with weak prevention settings or not fully deployed
79
days
Average adversary dwell time, leaving adversaries more than 2 months of unfettered access to compromised systems
common weaknesses were represented in 27% of CrowdStrike’s 2020 Incident Response engagements
While in previous years ransomware eCrime adversaries were rarely observed exfiltrating data, this year witnessed a widespread adoption of ransomware with data leak extortion tactics by multiple eCrime groups.
Organizations with Incident Response Services engagements that elected to engage CrowdStrike Services through outside counsel
KEY TRENDS FROM 2020
CrowdStrike’s incident responders identified a number of key themes from 2020, including:
Widespread remote work has broad-reaching effects on cybersecurity.
Ransomware actors have learned new tricks and refined extortion tactics.
Cloud infrastructure requires special attention from defenders.
Weaknesses in public-facing applications and services are increasingly dangerous.
State-sponsored adversaries leave smaller footprints.
A few key security enhancements can stop the next breach.
GET THE CYBER FRONT LINES REPORT NOW
Get the ReportBUT WAIT, THERE’S MORE!
Your journey doesn’t end with the Cyber Front Lines report! CrowdStrike offers recommendations and key insights to help you audit or improve your cybersecurity readiness in a variety of ways. Want to read or listen to more topics? Check out these resources to continue your learning.
Cyber Front Lines Report Blog
Cyber Front Lines Report CrowdCast
ACHIEVING SECURITY MATURITY
YOU’VE BEEN BREACHED…NOW WHAT?
WHAT IS INCIDENT RESPONSE?
WHAT IS CLOUD SECURITY ASSESSMENT?
INTELLIGENCE-LED RAPID RECOVERY
WHAT IS MANAGED DETECTION & RESPONSE?
HOW CROWDSTRIKE SERVICES CAN HELP
The authors behind this annual report are members of the CrowdStrike Services team, who work on the front lines of cybersecurity. The Services team helps organizations train for, react to and remediate a breach quickly and effectively to allow them to get back to business faster.
CrowdStrike offers services for all types of organizations and situations. This year’s report focuses on three core services:
INCIDENT RESPONSE SERVICES
Rapid response, containment and investigation with digital forensics and root cause analysis
Learn More
ENDPOINT RECOVERY SERVICES
Containment of active threats, recovery and remediation with speed and surgical precision
Learn More
FALCON COMPLETE
Continuous 24/7/365 managed detection, response and remediation, backed by up to $1M Breach Prevention Warranty
Learn MoreREPORT LIBRARY
Ready for the next report? CrowdStrike has you covered. The latest findings, analysis and recommendations on today’s cyber threats and most significant adversaries are below!
CONNECT WITH
CROWDSTRIKE SERVICES
CrowdStrike Services helps organizations train for, react to and remediate a breach quickly and effectively — getting you back to business faster.
