"CoreBackUp Deletion in correlation with other related security alerts"

wagov / WASOCAutomationPlaybook

For testing playbooks

1 stars 2 forks source link

"CoreBackUp Deletion in correlation with other related security alerts" #21

Closed carel-v98 closed 1 year ago

carel-v98 commented 1 year ago

Would this be acceptable remediation for backup deletion attempts?

DGOV-Bryce commented 1 year ago

This could do with some more info, while not necessarily super specific. Perhaps even just a link on how to secure backups (e.g. the ACSC advice: https://www.cyber.gov.au/backups#accordion-2780)

carel-v98 commented 1 year ago

Applied - just added the link