Automation and incident response
Containment and eradication
Containment is stopping the spread of an incident, for example by isolating an infected computer from the network so the attack does not reach other systems. Eradication is removing the cause itself, for example by deleting the malware, closing the vulnerability and removing the attacker's access.
Related terms
Get CertOwl on the App Store
Free download · A+ and Network+ completely free
+ daily lessons, flashcards and full exam simulations