---
title: "Incident Response Webinar:  Investigate a Rogue Insider with Varonis"
description: "Incident Response Webinar:  Investigate a Rogue Insider with Varonis"
---

[![Varonis Logo](https://info.varonis.com/hs-fs/hubfs/social-suggested-images/varonis-logo.png?width=230&height=75&name=varonis-logo.png "Varonis Logo")](https://www.varonis.com?hsLang=en)

Video Replay

# Incident Response Webinar: Investigate a Rogue Insider with Varonis

![](https://fast.wistia.com/embed/medias/9okznw6c5y/swatch)

About “Incident Response Webinar: Investigate a Rogue Insider with Varonis”

Presented By ![Arthur Yeung](https://info.varonis.com/hubfs/images/headshots/Arthur%20Yeung%20PNG.png) Arthur Yeung

Join our webinar for a play-by-play of a live attack simulation and investigation of a rogue insider threat using DatAlert’s new DFIR capabilities.

During this training session, our security analysts will execute a new attack scenario in our lab.

**Here’s the scenario:**

- An insider was paid to exfiltrate sensitive organizational data
- To remain uncovered, he takes control on a service account
- Using the service account, he scans company filers for documents with indicating keywords
- Copies matching documents to his PC
- Creates an encrypted ZIP file
- To remain uncovered, he uses the service account to upload the ZIP file to an external Gmail account 

| Request a Free Assessment |
| --- |

“Certain alerts will trigger scripts that will disable accounts to prevent further harmful actions. This has helped minimize or eliminate the impact from ransomware attacks.”

Aaron Neilson, System Administrator, Natures Sunshine Products

![sandisk logo.png](https://info.varonis.com/hs-fs/hubfs/sandisk%20logo.png?width=120&name=sandisk%20logo.png "sandisk logo.png")

![JuniperNetworks.png](https://info.varonis.com/hs-fs/hubfs/JuniperNetworks.png?width=119&name=JuniperNetworks.png "JuniperNetworks.png")

![ChildrensHospital-1.png](https://info.varonis.com/hs-fs/hubfs/ChildrensHospital-1.png?width=141&name=ChildrensHospital-1.png "ChildrensHospital-1.png")

© 2026 Varonis Systems, Inc