Automation and incident response

Incident response (IR) IR

A structured process of preparing for security incidents and of detecting, containing and recovering from them. The phases in order are: preparation, detection, analysis, containment, eradication, recovery and lessons learned.

All Security+ guides →

Related terms

Automation Orchestration Containment and eradication Tabletop exercise Threat hunting Root cause analysis (RCA)

Get CertOwl on the App Store

Free download · A+ and Network+ completely free
+ daily lessons, flashcards and full exam simulations