Coordinated containment with Microsoft Security and rebuilt the domain, Microsoft 365 tenant, network, and firewall.
CONSTRUCTION
A stronger foundation after a breach.
A construction company needed to regain control of its technology after a prolonged compromise.

THE CHALLENGE
A clear view of what was at stake.
Attackers had controlled the Microsoft 365 environment for approximately six months and were targeting clients, vendors, and partners through active phishing campaigns. The organization had no backup or disaster-recovery capability and relied on aging systems.
RARITY’S RESPONSE
Plan carefully.
Execute deliberately.
The work was organized around the organization’s immediate priorities and the dependencies that could not be left to chance.
Stabilized and recovered the organization’s corrupted Sage financial platform.
Introduced multifactor authentication, endpoint detection and response, zero-trust remote access, backup, recovery, and staff training.
THE OUTCOME
RebuiltTechnology working toward the right result.
Operational control was restored and foundational security controls were established for the work ahead.
LET’S TALK ABOUT WHAT’S NEXT
