Skip to content
Ferroscope
Menu

15 minutes · do this first

Stop the bleed

When a platform you use confirms a breach, the first hour is about closing access, not understanding it. Rotate the keys that can spend money or publish code.

Next · Fix certificate trust
4 steps17 minno tools required

The procedure

  1. Step 01 · 4 min

    Change the password from a different device

    If you think the machine is infected, do not type the new password into it. Use your phone or another computer.

  2. Step 02 · 5 min

    Revoke sessions and tokens

    Changing a password often leaves API tokens and active sessions alive. Revoke them explicitly.

  3. Step 03 · 5 min

    Rotate the secrets that can spend money

    Cloud keys, payment provider keys, and deployment tokens first. Read-only keys can wait an hour.

  4. Step 04 · 3 min

    Check the audit log for actions you did not take

    Look for new repositories, new deploy keys, new members, and unusual regions. Screenshot what you find.