I was about to download a PDF from a job application, then we got scared thinking it might be malware

we got scared too in the same way... anyway then we scanned it with antivirus it came out clean but still deleted the mail. wish we hadn't made a mistake in terms of ethics

Steps: 1. Upload the file to VirusTotal.com 2. Wait for the scan to complete 3. If the result is clean, open it; if not, delete and report 4. HR: Ban opening files alone

virustotal is very useful bro we always check there. we taught the employees too, no probles arise

Malware distribution method: Job application, PDF, Word doc ZIP archive. Because people open these files quickly. High risk.

So if VirusTotal is used, is that site reliable too? Aren't the files stored?

you guys escaped by that much bro.. and i mean you really acted fast. its great that you were suspicious!

Same here.

I didn't know that. If the notification path is long, notifications don't arrive; missing notifications mean delayed incident detection.

Correct me if I'm wrong.

I have an objection here. When making a decision, first look at what data you have on hand.

Most incidents start with a leaked password, not a vulnerability. Of course, it varies if your situation is different.

The discussion got scattered let me summarize. Mistakes made on the file in fake job application attachment side are usually reversible but expensive.

Hope this helps.

I completely agree. Having backups accessible on the same network and with the same identity makes them part of the target.

If I were you, I'd go this route.

You're right. Having backups accessible on the same network and with the same identity makes them part of the target.

Good luck with that.

I agree with this. Processes without records never improve, because you don't know what to fix.

I'm also curious if anyone does it differently.

If I understood correctly, you're saying: Everything goes well for the first three months; problems arise in the fourth.

Hope this helps.

You're right. Taking notes for two weeks yields better results than a six-month estimate.

Solutions that work at a small scale collapse when you grow; I learned this late. Correct me if I'm wrong.

theres a part I dont understand but honestly most incidents start with a leaked password, not a vulnerability.

of course, it varies if your situation is different.

id say dont rush. if you scold false alarms nobody will report again.

correct me if Im wrong.

There's also a measurement aspect to this. If you get three different answers on a topic, the question was asked wrong.

Just leaving this note, it might be useful.