If you are experiencing a breach, contact us.

US hotline 1-888-241-9812 Global hotline (+001)602-220-1440

Destructive malware attacks

Prepare and plan

Destructive malware attacks are simple and execute quickly. Get recommendations on preparation and planning before a destructive malware attack occurs.

Learn more (58.5 MB)

Respond to events

Get in-depth information on destructive attacks and how you can actively prepare for and respond to these events.

Learn more (3.35 MB)

Partner with the trusted advisors of IBM X-Force IRIS

Today’s reality means that organizations need to be constantly vigilant against breaches — and having a robust incident response plan in place is vital. A proactive approach offered by the IBM® X-Force® Incident Response and Intelligence Services (IRIS) team integrates security threat intelligence, incident response and remediation to help minimize the loss of revenue caused by a security incident — and provide a more comprehensive view of an attack so your organization can make the most informed decisions to defend it.

Download the X-Force IRIS solution brief

X-Force IRIS solutions help you before, during and after a breach

Strategize

The services offered by the X-Force IRIS team are designed to help you before, during and after a breach so you recover faster. Each solution is infused with threat intelligence, enabling your security team to be knowledgeable about threats to your environment.

Strategize

Solutions

Vision Retainer

An incident response subscription service that provides direct and immediate access to highly skilled security consultants.

Prepare for a breach

Improve your incident response plan

Arm your business with a battle-tested IR platform

X-Force Command Center

Experience a day in the life of a simulated cyberattack in a live environment. Train with the world’s premier cyber special forces team to test the skills you have, and learn the skills you need to succeed in today’s threat landscape.

Train for threat response

Test your cybersecurity skills (01:35)

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Learn about MDR

Plan

Before a breach

It is imperative to have solid incident response procedures in place before an attack happens. Being prepared is the first defense strategy to avoid operating in crisis mode. Planning should not be an afterthought, but well-documented and tested. With X-Force IRIS team services, your organization can identify potential threats before they strike.

Plan

Solutions

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants.

Prepare for a breach

Improve your incident response plan

Arm your business with a battle-tested IR platform

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Learn about MDR

Active threat assessment

Discovers if undetected threats exist within your infrastructure. X-Force IRIS analysts deploy network and host-based inspection technology to assess your environment, looking for anomalies and signs of compromise based on IBM’s knowledge of attack groups.

Learn more about Active Threat Assessment (1.4 MB)

Incident response planning

Attack simulation exercises, active threat hunting and continuous threat monitoring.

How to build a response plan that works

Identify gaps with IR planning (05:52)

Strategic threat assessment

X-Force Intelligence Services experts review your key assets to characterize threat events by the typical attackers, the likely infection vectors, and the techniques and procedures that adversaries employ.

Do you know what attackers are doing? (2.3 MB)

X-Force Threat Analysis Service (XFTAS)

Security intelligence gleaned from globally networked security operation centers and X-Force Research, collaboration with research partners, and meticulously analyzed open source intelligence (OSINT) data.

Integrate threat intelligence into your incident response

Respond

During a breach

What happens if you have a solid incident response plan in place, but still experience an attack? It’s critical to investigate and put an end to the attack quickly. X-Force IRIS offers security services to help you assess the situation — and minimize the damage — with forensic analysis, malware analysis, threat assessments and more.

Respond

Solutions

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants.

 

Prepare for a breach

Improve your incident response plan

Arm your business with a battle-tested IR platform

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Learn about MDR

Recover

After a breach

The worst is now over, but the recovery work is just beginning. Organizations should continue to monitor affected systems. Once the damage from an attack is contained, X-Force IRIS can help you incorporate what you’ve learned into protecting against the next attack.

Recover

Solutions

Threat Impact Analysis

Protect against future attacks by taking a deep look at threat groups and your organization’s threat level.

 

Assess the probabilities and results of threats (107 KB)

Vision Retainer

IR subscription service that provides direct and immediate access to highly skilled security consultants.

 

Prepare for a breach

Improve your incident response plan

Arm your business with a battle-tested IR platform

Managed Detection and Response

Intelligence-based defense solution that helps detect endpoint attacks in real time without relying on signatures, and disrupts them before they can penetrate your enterprise resources.

Learn about MDR

Read the latest news and research from the X-Force IRIS team

IRIS blogs

Meet some X-Force IRIS experts

 

When you partner with our team, you have access to a wealth of skills, expertise and insight to help your company take control and transform your incident management and response capabilities. Members have consulted on hundreds of the world’s largest breach investigations across numerous industries in both public and private sectors.

Wendi Whitmore

Wendi Whitmore

Global lead, IBM X-Force IRIS team

Wendi helped create the IBM X-Force IRIS team, using her 15 years’ experience in incident response, intelligence and data breach investigations. She has worked at CrowdStrike Services, Mandiant and the Air Force Office of Special Investigations.

Ahmed Saleh

Ahmed Saleh

Global lead, incident response and proactive services

Ahmed’s team delivers forensic, incident response, and proactive security services. With 14 years of experience, he has worked for NASA, the US Air Force, Disney and Mandiant.

Kevin Albano

Kevin Albano

Global lead, threat intelligence

Kevin leads the team on threat intelligence collections, advanced threat research and information analysis. With 17 years in IT, law enforcement and security consulting, he has worked at the FBI and Mandiant.

Christopher Scott

Christopher Scott

Global lead, remediation services

Christopher has led incident response teams for some of the largest data breach investigations and leads the remediation services team. Prior to IBM, he was at CrowdStrike Services and L-3 Communications.

Finance your security project with IBM Global Financing

Learn more