Hackers employ many methods to get into your network, like email phishing scams, password hacking, SQL injection, social engineering, fake login websites, fake access point, email attachments, etc. One of my personal favorite phishing scam we have encountered was a team that dropped flash drives in the employee parking lot with exploits on them. One of the employees plugged one of the drives into the computer to check to see the contents, and it installed a keylogger on the system. It emailed the hackers every keystroke the employee input through the keyboard. Fortunately for our client, he had an intrusion prevention systems and a logging server that is monitored, and we were able to detect the unauthorized access and disable the employee’s account. After that the client had us implement a USB group policy that wouldn’t allow USB drives to be detected on any systems in the office.

We perform periodic security audits that include penetration testing, policy review based on organizational changes, the physical expectation of equipment, retire outdated firewall rules, and log reviews. After that, we make a recommendation and implement the new policies and firewall rules to mitigate any new threats.