Incident response analyst report 2024

Kaspersky GERT's 2024 Incident Response Report summarizes real-world IR cases across regions and industries, reporting a rise in ransomware (41.6% of incidents) led by LockBit and other families, increased data-leak incidents, active exploitation of vulnerabilities (including CVE-2023-48788), and prevalent use of post‑exploitation tools like Mimikatz and PsExec; the report also analyzes initial attack vectors, APT activity trends, and provides actionable remediation and prevention recommendations.