WannaCry Ransomware Incident Analysis

A cybersecurity incident analysis of the 2017 WannaCry ransomware attack, examining its attack vector, exploited vulnerabilities, propagation mechanisms, and organizational impact.

The analysis covers the EternalBlue vulnerability (CVE-2017-0144), SMBv1, the DoublePulsar backdoor, affected organizations, and the weaknesses in security controls that contributed to the rapid spread of the attack.

The project also evaluates the incident response process, including detection, containment, eradication, recovery, and lessons learned, along with the operational, financial, and data security impact of the attack.