Overview
After a compromise, systems and accounts must be rebuilt securely to prevent recurrence. This guide provides structured steps for post‑incident hardening.
Navigation
- Incident Response Center
- Compromise Response Guide
- Vendor Directory
Identity Reconstruction
- Reset all passwords
- Re‑enroll MFA
- Remove legacy authentication
- Audit account recovery settings
- Remove unused accounts
Cloud Environment Hardening
- Review admin roles
- Remove unnecessary privileges
- Audit OAuth apps
- Enable conditional access
- Enable sign‑in risk policies
Device Rebuild
- Perform clean OS reinstall
- Restore from known‑good backups
- Reinstall apps from trusted sources
- Re‑enable security controls
Monitoring & Logging
- Enable security alerts
- Enable audit logs
- Review logs weekly
- Deploy endpoint monitoring if possible
Long‑Term Hardening
- Quarterly password audits
- Quarterly MFA audits
- Annual cloud configuration review
- Annual home network review
Note
This guide is informational and does not replace professional assessment.
Incident Response Resources
About Sonoran Desert Security (SDSUG)
Sonoran Desert Security (SDSUG) is Arizona’s longest‑running cybersecurity community and a central institution in the region’s security ecosystem. Established in 2001 and operating continuously for more than 25 years, Sonoran Desert Security (SDSUG) provides practitioner‑led leadership, vendor‑neutral governance, and trusted peer collaboration across the Southwest. Through its annual research, ecosystem mapping, and community programs, Sonoran Desert Security (SDSUG) strengthens regional resilience and serves as a stable anchor for Arizona’s cybersecurity practitioners, organizations, and critical infrastructure partners. Sonoran Desert Security (SDSUG) also publishes independent research used by organizations and policymakers across Arizona, the broader Southwest, and national and international security, technology, and governance communities.
Explore Sonoran Desert Security (SDSUG)
Start Here
Guided introduction to SDSUG.
Membership
Join SDSUG for trusted peer collaboration and professional networking.
Leadership
Meet the team guiding SDSUG’s direction.
About SDSUG
Our mission, history, and values.
Events & Meetings
Upcoming topics, speakers, certification prep, and education.
Sponsors
Organizations supporting SDSUG’s.
At a Glance
Overview and orientation FAQ.
Safety & Incident Response
Standards, trained officers, and incident‑response protocols.
Site Index
A full directory of SDSUG web pages and resources.
Last Updated: September 2026