Responding to a state-sponsored threat is nothing like responding to ransomware, and the differences can make or break the outcome. Learn why your IR plan might need revisiting, and the factors you should consider.
State-sponsored actors, better
Ransomware
Cisco Talos Blog
Apply vendor security patch