[](https://www.paloaltonetworks.com/unit42?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![unit42 logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit42-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/unit42?ts=markdown) * [About Unit 42](https://www.paloaltonetworks.com/unit42/about?ts=markdown) * Services ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Services [Assess and Test Your Security Controls](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [AI Security Assessment](https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/assess/attack-surface-assessment?ts=markdown) * [Breach Readiness Review](https://www.paloaltonetworks.com/unit42/assess/breach-readiness-review?ts=markdown) * [BEC Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/business-email-compromise?ts=markdown) * [Cloud Security Assessment](https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/assess/compromise-assessment?ts=markdown) * [Cyber Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/cyber-risk-assessment?ts=markdown) * [M\&A Cyber Due Diligence](https://www.paloaltonetworks.com/unit42/assess/mergers-acquisitions-cyber-due-diligence?ts=markdown) * [Penetration Testing](https://www.paloaltonetworks.com/unit42/assess/penetration-testing?ts=markdown) * [Purple Team Exercises](https://www.paloaltonetworks.com/unit42/assess/purple-teaming?ts=markdown) * [Ransomware Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/ransomware-readiness-assessment?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/assess/soc-assessment?ts=markdown) * [Supply Chain Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/assess/tabletop-exercise?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [IR Plan Development and Review](https://www.paloaltonetworks.com/unit42/transform/incident-response-plan-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/transform/security-program-design?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/transform/vciso?ts=markdown) * [Zero Trust Advisory](https://www.paloaltonetworks.com/unit42/transform/zero-trust-advisory?ts=markdown) [Respond in Record Time](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Cloud Incident Response](https://www.paloaltonetworks.com/unit42/respond/cloud-incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Managed Detection and Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/unit42/respond/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-unit-42.svg) UNIT 42 RETAINER Custom-built to fit your organization's needs, you can choose to allocate your retainer hours to any of our offerings, including proactive cyber risk management services. Learn how you can put the world-class Unit 42 Incident Response team on speed dial. Learn more](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * Unit 42 Threat Research ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Unit 42 Threat Research [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Threat Briefs and Assessments Details on the latest cyber threats](https://unit42.paloaltonetworks.com/category/threat-research/) * [Tools Lists of public tools released by our team](https://unit42.paloaltonetworks.com/tools/) * [Threat Reports Downloadable, in-depth research reports](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch&ts=markdown) [THREAT REPORT 2025 Unit 42 Global Incident Response Report Read now](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?ts=markdown) [THREAT BRIEF Russia-Ukraine Cyberattacks: How to Protect Against Related Cyberthreats Including DDoS, HermeticWiper, Gamaredon, Website Defacement Learn more](https://unit42.paloaltonetworks.com/preparing-for-cyber-impact-russia-ukraine-crisis/) [THREAT REPORT Highlights from the Unit 42 Cloud Threat Report, Volume 6 Learn more](https://www.paloaltonetworks.com/resources/research/unit-42-cloud-threat-report-volume-6?ts=markdown) * Partners ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Partners Partners * [Threat Intelligence Sharing](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) * [Law Firms and Insurance Providers](https://www.paloaltonetworks.com/unit42/incident-response-partners?ts=markdown) [THREAT REPORT 2025 Unit 42 Incident Response Report Read now](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?ts=markdown) [THREAT BRIEF Russia-Ukraine Cyberattacks: How to Protect Against Related Cyberthreats Including DDoS, HermeticWiper, Gamaredon, Website Defacement Learn more](https://unit42.paloaltonetworks.com/preparing-for-cyber-impact-russia-ukraine-crisis/) [THREAT BRIEF Operation Falcon II: Unit 42 Helps Interpol Identify Nigerian Business Email Compromise Ring Members Learn more](https://unit42.paloaltonetworks.com/operation-falcon-ii-silverterrier-nigerian-bec/) * Resources ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources Resources * [Research Reports](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch&ts=markdown) * [Webinars](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwebinar&ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/unit42/customer-stories?ts=markdown) * [Datasheets](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fdatasheet&ts=markdown) * [Videos](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fvideo&ts=markdown) * [Infographics](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Finfographic&ts=markdown) * [Whitepapers](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwhitepaper&ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Farticle&ts=markdown) Industries * [Financial Services](https://www.paloaltonetworks.com/industry/unit42-financial-services?ts=markdown) * [Healthcare](https://www.paloaltonetworks.com/industry/unit42-healthcare?ts=markdown) * [Manufacturing](https://www.paloaltonetworks.com/industry/unit42-manufacturing?ts=markdown) [THREAT REPORT 2025 Unit 42 Global Incident Response Report Read now](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?ts=markdown) [ANALYST REPORT Unit 42^®^ named a Leader in the 2025 IDC MarketScape for Worldwide IR Services. See our difference](http://start.paloaltonetworks.com/idc-incident-response-marketscape-2025) * * [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html) ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-white.svg) [](https://www.paloaltonetworks.com/unit42?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search#q=unit%2042&sort=relevancy&layout=card&numberOfResults=25) Close search modal *** ** * ** *** INCIDENT RESPONSE PARTNERS # Law Firms and Insurance Providers Provide your clients the help they need before, during, and after a breach. The Unit 42 team, a preferred provider on 70+ insurance panels, is available 24x7 to quickly investigate critical security incidents and help eradicate the threat so your clients can recover and get back to business. * [Contact Us](#contact) * [Get the TI Bulletin](https://start.paloaltonetworks.com/unit42-threat-intel-bulletin.html) **unit42** ![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-white.svg) LAW FIRMS AND INSURANCE PROVIDERS ## Reduce cyber risk and expedite response efforts ### Our incident response methodology jump starts investigations with best in class tools to support the entire incident response life cycle. With Unit 42^®^ cyber risk management and incident response expertise we help your clients before, during and after a breach. ![Card Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response-partners/faster-breach-responsetime.svg) ![Card Mobile Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response-partners/faster-breach-responsetime.svg) ### Deliver additional value Build trust at the highest levels of your client's organization with an incident response team that can respond to incidents before the damage escalates. ![Card Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response-partners/take-a-threat-informe-approach-to-your-strategy.svg) ![Card Mobile Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response-partners/take-a-threat-informe-approach-to-your-strategy.svg) ### Stay current on the latest threats to your clients Gain a better understanding of the evolving threat landscape, so you can help inform your clients' security and business decisions. ![Card Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response-partners/reduce-costs-or-risks.svg) ![Card Mobile Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response-partners/reduce-costs-or-risks.svg) ### Reduce long-term risk With a full range of incident response services from Unit 42, your clients can improve their security program and reduce the impact if a breach occurs. ![Unit 42 Stars](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/asset-thumbnail.png) DOWNLOAD THE REPORT ## Help your clients accelerate their IR preparedness Get a detailed overview of recent DFIR trends, what sets an IR provider apart in a crowded market, and what to look for in an IR provider. [Download report](https://start.paloaltonetworks.com/gartner-dfir-guide.html) ![unit42 star](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42/Unit42Star.png)![unit42 star](https://www.paloaltonetworks.com/content/dam/pan/en_US/unit42-contained-exp/overview/Unit42DemandGenMobile.svg) {#service-features} YOUR TRUSTED PARTNER ## Unit 42 Incident Response Expertise ### Unit 42 brings together world renowned threat researchers and incident response experts to deliver the help your clients need. ![RANSOMWARE INVESTIGATION \& NEGOTIATION](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response/ramsomware.png) ![RANSOMWARE INVESTIGATION \& NEGOTIATION](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/assess/tabletop-exercises/Icon_library_Ransomware.svg) ### RANSOMWARE INVESTIGATION \& NEGOTIATION ![CLOUD INCIDENT RESPONSE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/cloud-incident.svg) ![CLOUD INCIDENT RESPONSE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/assess/tabletop-exercises/Icon_library_Cloud-data-classification.svg) ### CLOUD INCIDENT RESPONSE ![INSIDER THREAT](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/assess/tabletop-exercises/incident-report-black.svg) ![INSIDER THREAT](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/assess/tabletop-exercises/Icon_library_Incident-response.svg) ### INSIDER THREAT ![EXPERT WITNESS \& TESTIMONY](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/expert-witness.svg) ![EXPERT WITNESS \& TESTIMONY](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/assess/tabletop-exercises/talent-experience-black.svg) ### EXPERT WITNESS \& TESTIMONY ![BUSINESS EMAIL COMPROMISE INVESTIGATION](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/business-email.svg) ![BUSINESS EMAIL COMPROMISE INVESTIGATION](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/assess/tabletop-exercises/Icon_library_Malicious%20email.svg) ### BUSINESS EMAIL COMPROMISE INVESTIGATION {#access} ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring-1.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring-2.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-inner-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-inner-ring-1.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-center-1.svg) ## Before a breach Proactively assess and test cybersecurity controls against the real-world threats targeting your client's organization and share the findings with the board and key stakeholders. [Learn more](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) ### SERVICES: * [AI Security Assessment](https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment?ts=markdown) * [Cloud Security Assessment](https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment?ts=markdown) * [Penetration Testing](https://www.paloaltonetworks.com/unit42/assess/penetration-testing?ts=markdown) * [Purple and Red Team Exercises](https://www.paloaltonetworks.com/unit42/assess/purple-teaming?ts=markdown) * [Ransomware Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/ransomware-readiness-assessment?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/assess/soc-assessment?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * [Zero Trust Advisory](https://www.paloaltonetworks.com/unit42/transform/zero-trust-advisory?ts=markdown) {#transform} ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring-1.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring-2.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-inner-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-inner-ring-1.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-center-2.svg) ## During a breach Deploy Unit 42 incident response experts to quickly investigate and remediate even the most advanced attacks. We work in close partnership with cyber insurance carriers and legal teams. [Learn more](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) ### SERVICES: * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Cloud Incident Response](https://www.paloaltonetworks.com/unit42/respond/cloud-incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) {#respond} ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring-1.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-outer-ring-2.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-inner-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-inner-ring-1.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-center-3.svg) ## After a breach Help your clients improve their security program and increase their resilience. [Learn more](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) ### SERVICES: * [Security Program Design](https://www.paloaltonetworks.com/unit42/transform/security-program-design?ts=markdown) * [Incident Response Plan Development \& Review](https://www.paloaltonetworks.com/unit42/transform/incident-response-plan-development-review?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/transform/vciso?ts=markdown) Transform your cybersecurity with Unit 42 --- [![white triangle](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/video-play-white.svg)](https://www.paloaltonetworks.com//players.brightcove.net/1050259881001/default_default/index.html?videoId=6371373113112&ts=markdown) INCIDENT RESPONSE PARTNERS ### Law Firms \& Insurance Unit 42 is trusted by top cyber insurance providers and legal counsels across the globe. [Get the TI Bulletin](https://start.paloaltonetworks.com/unit42-threat-intel-bulletin.html) ![Law Firms \& Insurance](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/law-firm.svg) *** ** * ** *** {#why} WHY PARTNER WITH UNIT 42 ## World-renowned security experts, always in your corner ### As an industry-leading threat intelligence, cyber risk management and incident response organization, it's our job to help your clients prepare for and respond to some of the most challenging threats. As threats escalate, we act as your trusted partner to advise and strengthen cybersecurity programs. [Learn more](https://www.paloaltonetworks.com/unit42/about?ts=markdown) ![Card Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response/1-world-class-threat-intelligence-lt.svg) ![Card Mobile Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response/1-world-class-threat-intelligence-lt.svg) ### WORLD-CLASS THREAT INTELLIGENCE Unit 42 provides access to one of the world's largest and most experienced threat intelligence teams. Our team of more than 200 cyberthreat researchers includes threat hunters, malware reverse engineers and threat modeling experts who enable you to apply a threat-informed approach to prepare for and respond to the latest cyberthreats. ![Card Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response/experience-and-expertise.svg) ![Card Mobile Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response/experience-and-expertise.svg) ### TRUSTED EXPERTISE \& EXPERIENCE Unit 42 has assembled an experienced team of security consultants with backgrounds in public and private sectors who have handled some of the largest cyberattacks in history. We manage complex cyber risks and respond to advanced threats, including nation-state attacks, APTs and complex ransomware investigations. ![Card Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response/2%20-industry-leading-tools-lt.svg) ![Card Mobile Head Icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/incident-response/2%20-industry-leading-tools-lt.svg) ### INDUSTRY-LEADING TOOLS Unit 42 security consultants leverage industry-leading Palo Alto Networks tools to jumpstart your investigation by gaining necessary visibility across your endpoint, network, cloud and third-party data. This enables you to develop and execute a plan to get back to business as quickly as possible following an incident. #### Related resources [See all resources](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&ts=markdown) REPORT #### Unit 42 IR Services a Leader in the Forrester Wave™ [Read the report](https://www.paloaltonetworks.com/blog/2024/06/forrester-wave-for-cybersecurity-incident-response/?ts=markdown) Webpage #### Unit 42 Retainer [Learn more](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) REPORT #### 2025 Unit 42 Global Incident Response Report [Explore findings](https://start.paloaltonetworks.com/unit-42-incident-response-report.html) {#contact} ![jeffries-logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/panw-sml-logo-white.svg) ## Get immediate IR support Do you need immediate assistance to support a client under attack? Get in touch by filling out the form or calling the Unit 42 Incident Response team: * North America Toll-Free: +1.866.486.4842 (+1.866.4.UNIT42) * UK: +44.20.3743.3660 * EMEA: +31.20.299.3130 * APAC: +65.6983.8730 * Japan: +81.50.1790.0200 If your clients have cyber insurance or legal counsel, they can request Unit 42 by name to help investigate the matter. First Name \* Last Name \* Email \* Company \* Job Level \*Job Level Job Function/Focus Area \*Job Function/Focus Area Phone \* Country \*Country Department \* StateState ProvinceProvince Zip Code \* Sign me up to receive news, product updates, sales outreach, event information and special offers about Palo Alto Networks and its partners. By submitting this form, I understand my personal data will be processed in accordance with [Palo Alto Networks Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) and [Terms of Use.](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. Contact us #### THANK YOU! A Palo Alto Networks specialist will reach out to you shortly. We look forward to connecting with you! {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2025 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language