Crypto Mining

Unauthorized deployment of cryptocurrency mining software on compromised infrastructure — often a foothold indicator for broader compromise, not just a resource theft issue.

Triage

2 procedures
P1

Detect and Characterize Unauthorized Mining

~75 min
P1

Container Escape Detected

~90 min

Containment

2 procedures
P1

Contain the Mining Workload and Entry Vector

~60 min
P1

Isolate Compromised Kubernetes Workload

~120 min
Sponsored

Collection

1 procedure
P1

Collect Kubernetes Control-Plane Audit Trail

~120 min

Analysis

2 procedures
P2

Analyze Mining Persistence and Secondary Tooling

~120 min
P2

Analyze Container Escape Primitives and Cluster-Wide Exposure

~240 min
Need a DFIR responder? ForgeWork provides 24/7 incident response across Europe.
Get incident response Book a call +32 2 315 25 83