State of Cyber Digital Forensics and Incident Response Report

This report presents findings from the Triskele Labs Digital Forensics and Incident Response (DFIR) team regarding cyber incidents during the 2023-24 financial year. It documents a significant increase in DFIR investigations, with a 158% rise compared to the previous year, indicating a growing prevalence and complexity of cyber threats. The report highlights the continued threat of ransomware attacks, which disrupt business operations and cause financial damage. Additionally, it notes a rise in Business Email Compromise (BEC) incidents, where attackers exploit session tokens to gain unauthorized access to accounts. The report emphasizes the need for robust email security protocols and continuous monitoring to mitigate these threats. Furthermore, it details the distribution of incidents across various Australian states and industry sectors, underscoring that all organizations are potential targets for cyber incidents. The findings stress the importance of improving security measures and preparedness to protect against evolving cyber threats.