Isoler les appareils
Nous partons de votre environnement réel et de vos usages.
Cybersécurité défensive · Maroc
Prepare your company for ransomware
Decide in advance who isolates systems, who communicates, where backups live and how operations resume.
JabaRoot.ma is an independent defensive cybersecurity service operated by TRT Digital. We are not affiliated with any hacker group.
Response roomLIVE
01Contain
02Preserve
03Recover
Une intervention utile, pas un rapport oublié
Comprendre le risque, corriger les priorités, vérifier le résultat.
Préserver les journaux
Nous traitons d’abord ce qui réduit concrètement le risque.
Activer le plan de crise
Chaque action est documentée et expliquée à votre équipe.
Restaurer depuis une copie saine
Nous contrôlons la correction et préparons la suite.
Première étape
Transformons votre risque en plan d’action.
Continue exploring
Related topics for your next decision
Cyber incident responseContain the threat, preserve evidence, restore operations and strengthen your environment.Read morePractical cybersecurity cases for companies and agenciesRepresentative scenarios based on observed risks, explaining business impact and the steps for prevention, containment and recovery.Read moreCompromised Meta or Google Ads account: recovery planA complete scenario for restoring access, stopping fraudulent spend, preserving evidence and securing an agency’s client accounts.Read morePayment fraud and compromised business emailHow an attacker hijacks a supplier conversation, changes bank details and pressures finance to pay—and how to break that chain.Read moreWordPress compromised through a vulnerable pluginFrom malicious upload to server takeover: a cleanup, restoration and hardening scenario that protects the site and customer data.Read moreThe Jabaroot story: understand without amplifyingA factual timeline of claimed incidents, confirmed information and practical lessons for Moroccan organizations.Read more
Frequently asked questions
Clear answers before you decide.
Carefully isolate affected access or devices, preserve evidence, record times and observed changes, then contact a competent response team.
Not automatically. A rushed action can destroy evidence or increase downtime. The right choice depends on the incident.
We help document the incident, secure connected access, follow official recovery procedures and prevent recurrence.
Initial containment may begin quickly. Investigation and recovery depend on the affected systems, available access and reliable backups.