You suspect that a user's workstation has been infected with ransomware. Walk through your incident response process step by step.

Sample answer preview

A suspected ransomware infection is one of the most serious security incidents you will encounter as an IT support technician. Ransomware can encrypt files across the local machine, mapped network drives, and even cloud-synced folders within minutes.