Cohesity CERT Digital Jump Bag and Clean Room Workshop

This document is a solution brief detailing the Cohesity CERT Digital Jump Bag and Clean Room Workshop. The workshop aims to assist organizations in designing operational, architectural, and technical foundations necessary for effective incident response and recovery, particularly in the context of modern ransomware attacks. It emphasizes the importance of secure recovery by rebuilding trusted capabilities from validated sources to prevent reinfection. Participants will collaborate with Cohesity consultants to define roles, workflows, and technologies essential for establishing a Clean Room, which serves as a secure environment for investigating and restoring critical systems post-attack. The workshop also focuses on creating a Digital Jump Bag that contains trusted tools and configurations needed for a Minimum Viable Response Capability (MVRC). The document outlines the engagement approach, including discovery, documentation, and discussion phases, and lists deliverables such as a tailored Clean Room architecture and a facilitator’s guide for future workshops.