[](https://www.paloaltonetworks.com/unit42?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![unit42 logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit42-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/unit42?ts=markdown) * [About Unit 42](https://www.paloaltonetworks.com/unit42/about?ts=markdown) * Services ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Services [Assess and Test Your Security Controls](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [AI Security Assessment](https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/assess/attack-surface-assessment?ts=markdown) * [Breach Readiness Review](https://www.paloaltonetworks.com/unit42/assess/breach-readiness-review?ts=markdown) * [BEC Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/business-email-compromise?ts=markdown) * [Cloud Security Assessment](https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/assess/compromise-assessment?ts=markdown) * [Cyber Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/cyber-risk-assessment?ts=markdown) * [M\&A Cyber Due Diligence](https://www.paloaltonetworks.com/unit42/assess/mergers-acquisitions-cyber-due-diligence?ts=markdown) * [Penetration Testing](https://www.paloaltonetworks.com/unit42/assess/penetration-testing?ts=markdown) * [Purple Team Exercises](https://www.paloaltonetworks.com/unit42/assess/purple-teaming?ts=markdown) * [Ransomware Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/ransomware-readiness-assessment?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/assess/soc-assessment?ts=markdown) * [Supply Chain Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/assess/tabletop-exercise?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [IR Plan Development and Review](https://www.paloaltonetworks.com/unit42/transform/incident-response-plan-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/transform/security-program-design?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/transform/vciso?ts=markdown) * [Zero Trust Advisory](https://www.paloaltonetworks.com/unit42/transform/zero-trust-advisory?ts=markdown) [Respond in Record Time](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Cloud Incident Response](https://www.paloaltonetworks.com/unit42/respond/cloud-incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Managed Detection and Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/unit42/respond/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-unit-42.svg) UNIT 42 RETAINER Custom-built to fit your organization's needs, you can choose to allocate your retainer hours to any of our offerings, including proactive cyber risk management services. Learn how you can put the world-class Unit 42 Incident Response team on speed dial. Learn more](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * Unit 42 Threat Research ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Unit 42 Threat Research [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Threat Briefs and Assessments Details on the latest cyber threats](https://unit42.paloaltonetworks.com/category/threat-research/) * [Tools Lists of public tools released by our team](https://unit42.paloaltonetworks.com/tools/) * [Threat Reports Downloadable, in-depth research reports](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch&ts=markdown) [THREAT REPORT 2025 Unit 42 Global Incident Response Report Read now](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?ts=markdown) [THREAT BRIEF Russia-Ukraine Cyberattacks: How to Protect Against Related Cyberthreats Including DDoS, HermeticWiper, Gamaredon, Website Defacement Learn more](https://unit42.paloaltonetworks.com/preparing-for-cyber-impact-russia-ukraine-crisis/) [THREAT REPORT Highlights from the Unit 42 Cloud Threat Report, Volume 6 Learn more](https://www.paloaltonetworks.com/resources/research/unit-42-cloud-threat-report-volume-6?ts=markdown) * Partners ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Partners Partners * [Threat Intelligence Sharing](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) * [Law Firms and Insurance Providers](https://www.paloaltonetworks.com/unit42/incident-response-partners?ts=markdown) [THREAT REPORT 2025 Unit 42 Incident Response Report Read now](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?ts=markdown) [THREAT BRIEF Russia-Ukraine Cyberattacks: How to Protect Against Related Cyberthreats Including DDoS, HermeticWiper, Gamaredon, Website Defacement Learn more](https://unit42.paloaltonetworks.com/preparing-for-cyber-impact-russia-ukraine-crisis/) [THREAT BRIEF Operation Falcon II: Unit 42 Helps Interpol Identify Nigerian Business Email Compromise Ring Members Learn more](https://unit42.paloaltonetworks.com/operation-falcon-ii-silverterrier-nigerian-bec/) * Resources ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources Resources * [Research Reports](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fresearch&ts=markdown) * [Webinars](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwebinar&ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/unit42/customer-stories?ts=markdown) * [Datasheets](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fdatasheet&ts=markdown) * [Videos](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fvideo&ts=markdown) * [Infographics](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Finfographic&ts=markdown) * [Whitepapers](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Fwhitepaper&ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&fq=RC_TYPE_DFACET%3Apan%253Aresource-center%252Frc-type%252Farticle&ts=markdown) Industries * [Financial Services](https://www.paloaltonetworks.com/industry/unit42-financial-services?ts=markdown) * [Healthcare](https://www.paloaltonetworks.com/industry/unit42-healthcare?ts=markdown) * [Manufacturing](https://www.paloaltonetworks.com/industry/unit42-manufacturing?ts=markdown) [THREAT REPORT 2025 Unit 42 Global Incident Response Report Read now](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?ts=markdown) [ANALYST REPORT Unit 42^®^ named a Leader in the 2025 IDC MarketScape for Worldwide IR Services. See our difference](http://start.paloaltonetworks.com/idc-incident-response-marketscape-2025) * * [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html) ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-white.svg) [](https://www.paloaltonetworks.com/unit42?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search#q=unit%2042&sort=relevancy&layout=card&numberOfResults=25) Close search modal *** ** * ** *** Respond in record time"\> ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/hero-circle-outer-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/hero-circle-inner-ring.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/hero-circle-inner-ring-1.svg)![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/circle-center-respond.svg) INCIDENT RESPONSE SERVICES # Respond in record time Minimize the damage of an attack -- and just as importantly -- perform a post-incident analysis to learn from the event and improve your defenses going forward. * [Contact us](#contact) * [Tour the Unit 42 Retainer](https://www.paloaltonetworks.com/resources/ebooks/unit42-retainer-tour?ts=markdown) **unit42** ![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-white.svg) FEATURED INCIDENT RESPONSE SERVICES ## Facing a security incident? We're here to help. ### When an attack occurs, there is a material threat to your business. Consider us your incident response team on speed dial. With Unit 42^®^ at your side, you will investigate, respond to and recover from attacks while creating a feedback loop to strengthen your defenses after each response. ![Unit 42 threat-informed incident response](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/panw-sml-logo-white.svg) Transform your cybersecurity with Unit 42 --- [![white triangle](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/video-play-white.svg)](https://www.paloaltonetworks.com//players.brightcove.net/1050259881001/default_default/index.html?videoId=6371373113112&ts=markdown) UNIT 42 RETAINER ### Gain peace of mind with on-demand access to our experts With a Unit 42 Retainer, you make our experts an extension of your team. You place them on speed dial for incident response services with pre-negotiated terms and faster response times whenever you require assistance. Retainer credits can also be used toward cyber risk management services to help proactively improve your security posture. [Learn more](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) ![Two women and two men sit at a conference table reviewing cybersecurity retainer documents with a circle graphic overlay in the bottom right corner.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/Respond-Retainer.png) ![THE NEED](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/need.svg) THE NEED Access a full range of incident response and cyber risk management services on demand ![THE OUTCOME](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/outcome.svg) THE OUTCOME Avoid a frantic search for help, minimize an attack and get back to business ![OUR SERVICE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/service.svg) OUR SERVICE Unit 42 Retainer ![Two women and two men sit at a conference table reviewing cybersecurity retainer documents with a circle graphic overlay in the bottom right corner.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/Respond-Retainer.png) INCIDENT RESPONSE ### Contain an incident and remove it fully at its source Jumpstart your investigation with Unit 42 IR experts, taking advantage of our experience responding to thousands of incidents similar to yours. With our threat intelligence and advanced incident response tools across endpoint, network and cloud, we provide lightning-fast containment to minimize the impact on your business. [Learn more](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) ![An incident response image shows a dashboard of blue labeled icons linking to a security breach icon in red with a graphic overlay in the bottom left corner.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/Incident-Response-ImageR3.png) ![THE NEED](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/need.svg) THE NEED Respond to, investigate and remediate security incidents with experienced incident responders ![THE OUTCOME](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/outcome.svg) THE OUTCOME Deliver confidence that the threat is quickly contained and fully eradicated ![OUR SERVICE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/service.svg) OUR SERVICE Incident Response ![An incident response image shows a dashboard of blue labeled icons linking to a security breach icon in red with a graphic overlay in the bottom left corner.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/Incident-Response-ImageR3.png) DIGITAL FORENSICS ### Uncover the facts about what happened When disputes involving cybersecurity end up in court or lead to a regulatory or internal investigation, you can connect Unit 42 with your legal counsel to review digital evidence on computer systems, network devices and phones or tablets, and we can provide expert witness testimony if required. [Learn more](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) ![THE NEED](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/need.svg) THE NEED Collect and investigate data to determine the narrative of what transpired ![THE OUTCOME](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/outcome.svg) THE OUTCOME Get defensible reporting of digital evidence for regulatory, internal or criminal investigations ![OUR SERVICE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/service.svg) OUR SERVICE Digital Forensics *** ** * ** *** CLOUD INCIDENT RESPONSE ### Remediate complex cloud incidents Quickly address and contain cloud-specific threats faster with a team that understands the differences between traditional DFIR and Cloud DFIR and is equipped with industry-leading cloud tools. [Learn more](https://www.paloaltonetworks.com/unit42/respond/cloud-incident-response?ts=markdown) ![THE NEED](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/need.svg) THE NEED Reduce the need to hire hard-to-find cloud IR experts during your darkest hour ![THE OUTCOME](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/outcome.svg) THE OUTCOME Recover from a cloud incident with confidence ![OUR SERVICE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/service.svg) OUR SERVICE Cloud Incident Response MANAGED THREAT HUNTING ### Let Unit 42 experts hunt down attackers in your environment The Managed Threat Hunting service offers round-the-clock monitoring from Unit 42 experts to discover attacks anywhere in your organization. Our threat hunters work on your behalf to discover advanced threats, such as state-sponsored attackers, cybercriminals, malicious insiders and malware. [Learn more](https://www.paloaltonetworks.com/unit42/respond/managed-threat-hunting?ts=markdown) ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/MTH_Respond.png) ![THE NEED](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/need.svg) THE NEED Security experts who search your environment for attacker tactics and techniques ![THE OUTCOME](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/outcome.svg) THE OUTCOME Instantly learn about high-risk incidents with detailed and clear reports ![OUR SERVICE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/service.svg) OUR SERVICE Unit 42 Managed Threat Hunting Service ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/MTH_Respond.png) MANAGED DETECTION AND RESPONSE ### Unit 42 expertise, delivered as a managed service Unit 42 experts work for you to detect and respond to cyber attacks, 24/7, allowing your team to scale fast and focus on what matters most. Cortex XDR gives our analysts unmatched visibility into all data sources (endpoint, network, cloud, and identity) to quickly identify and stop malicious activity most likely to impact your organization. [Learn more](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) ![Image Alt](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/MDR_Respond.png) ![THE NEED](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/need.svg) THE NEED As attack surfaces grow and cybersecurity skills gap widens, extra help is needed ![THE OUTCOME](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/outcome.svg) THE OUTCOME Unit 42 experts work for you to detect and respond to cyber attacks, 24/7 ![OUR SERVICE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/service.svg) OUR SERVICE Unit 42 Managed Detection and Response (MDR) Service ![Image Alt](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/MDR_Respond.png) Managed XSIAM ### 24/7 expert-led defense for every attack surface Get end-to-end managed security operations on the leading Cortex XSIAM platform including zero -touch data onboarding and optimization, extended managed detection and response, intelligence driven threat hunting, custom detection engineering, and automation-fueled expert response. [Learn more](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/expert-led-defense-for-every-attack-surface.jpg) ![THE NEED](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/need.svg) THE NEED Cybersecurity teams need to augment their skilled SOC resources as attack surfaces grow ![THE OUTCOME](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/outcome.svg) THE OUTCOME Faster threat detection and response across your entire attack surface, 24/7 ![OUR SERVICE](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/service.svg) OUR SERVICE Unit 42 Managed XSIAM Service ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/expert-led-defense-for-every-attack-surface.jpg) ## Be prepared. Get the latest threat intel. ### Make sure you're ready for the threats you face. Stay informed with up-to-date threat intelligence and vulnerability research from our expert team of threat analysts. INCIDENT RESPONSE PARTNERS ### Law Firms \& Insurance Minimize costs and reduce liability by getting your clients the help they need before, during and after a breach. [Learn more](https://www.paloaltonetworks.com/unit42/incident-response-partners?ts=markdown) ![Law Firms \& Insurance](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/respond/150-70.svg) ## Explore customer stories ### Discover how Unit 42 security consultants and incident responders are helping our customers before, during and after an incident. [View all customer stories](https://www.paloaltonetworks.com/unit42/customer-stories?ts=markdown) ![Infrastructure Manufacturer Reclaims Control After Dual Ransomware Attacks](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ir-unit42-2024/industrial-water-filters-white-pipes-and-red-valves-purification-of-water-at-plant.jpg) ## Infrastructure Manufacturer Reclaims Control After Dual Ransomware Attacks [Learn how Unit 42 protected data and operations](https://www.paloaltonetworks.com/customers/infrastructure-manufacturer-reclaims-control-after-dual-ransomware-attacks?ts=markdown) ![Unit 42 Secures Medical Device Manufacturer After Network Breach](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ir-unit42-2024/secures-medical-device-manufacturer-after-network-breach.jpg) ## Unit 42 Secures Medical Device Manufacturer After Network Breach [See how our IR team sprang into action](https://www.paloaltonetworks.com/customers/unit42-secures-medical-device-manufacturer-after-network-breach?ts=markdown) ![Government Eradicates Ransomware Threat and Reinstates Critical Services](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ir-unit42-2024/the-government-of-a-communist-country.jpg) ## Government Eradicates Ransomware Threat and Reinstates Critical Services [See how our Unit 42 experts took action](https://www.paloaltonetworks.com/customers/government-eradicates-ransomware-threat-and-reinstates-critical-services?ts=markdown) ![Restoring a Software and Services Provider’s Cloud Environment After a Breach](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/lapsus$-sp-case-study.png) ## Restoring a Software and Services Provider's Cloud Environment After a Breach [See the Lapsus$ cloud breach case study](https://www.paloaltonetworks.com/customers/restoring-a-software-and-services-providers-cloud-environment-after-a-breach?ts=markdown) ![Multinational Organization Enhances Defenses by Stress Testing Its Cybersecurity Program](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/case-study/multinational-organization-enhances-defenses-by-stress-testing-its-cybersecurity-program.jpg) ## Multinational Organization Enhances Defenses by Stress Testing Its Cybersecurity Program [Read the cyber risk management case study](https://www.paloaltonetworks.com/customers/multinational-organization-enhances-defenses-by-stress-testing-its-cybersecurity-program?ts=markdown) {#stop} #### Related resources [See all resources](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Funit42-managed-detection-and-response&ts=markdown) REPORT #### 2025 Unit 42 Global Incident Response Report [Explore findings](https://start.paloaltonetworks.com/unit-42-incident-response-report.html) BLOG #### Unit 42 IR Services a Leader in the Forrester Wave™ [Read the blog](https://www.paloaltonetworks.com/blog/2024/06/forrester-wave-for-cybersecurity-incident-response/?ts=markdown) CUSTOMER STORIES #### Nine stories of Unit 42 in action. [Read the e-book](https://start.paloaltonetworks.com/how-nine-organizations-respond-to-and-prepare-for-cyberthreats-with-Unit-42) GARTNER REPORT #### 4 Key Considerations to Perform Effective Incident Response [Embrace readiness](http://start.paloaltonetworks.com/gartner-four-key-considerations-to-perform-effective-incident-response) ## Before, during and after an incident, we've got you covered ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/portfolio-hovered-1.svg) ASSESS Cyber Risk Management [Learn more](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/portfolio-hovered-2.svg) TRANSFORM Cyber Risk Management \& Threat Intel [Learn more](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) ![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/portfolio-hovered-3.svg) RESPOND Incident Response {#contact} ![jeffries-logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/unit42-contained-exp/overview/panw-sml-logo-white.svg) ## Go from reactive to proactive Our consultants serve as your trusted advisors to assess and test your security controls against the right threats, transform your security strategy with an intelligence-informed approach and respond to incidents in record time. First Name \* Last Name \* Email \* Company \* Job Level \*Job Level Job Function/Focus Area \*Job Function/Focus Area Phone \* Country \*Country Department \* StateState ProvinceProvince Zip Code \* Under Attack?Under Attack?Yes, I have an urgent matterNo, I'm looking to connect with the sales team IncidentType Incident TypeRansomwareBusiness Email CompromiseNetwork IntrusionOther Additional Attack Details Sign me up to receive news, product updates, sales outreach, event information and special offers about Palo Alto Networks and its partners. By submitting this form, I understand my personal data will be processed in accordance with [Palo Alto Networks Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) and [Terms of Use.](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. Contact us #### THANK YOU! A Palo Alto Networks specialist will reach out to you shortly. We look forward to connecting with you! {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2025 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language