ConceptsContainment

Containment

Actions taken to limit the spread or impact of an incident.

Glossary definition

12 direct links5 lessons

Concept Neighborhood

Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons

Start here

Detection and Analysis

The foundation Containment builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Detection and AnalysisStart here

The incident-response phase where a potential incident is detected, validated, and analyzed to understand its nature and scope, turning an initial signal into a confirmed, understood incident that response can act on.

lessons

Relatedsorted by lesson coverage

Incident Lifecycle

lessons

Incident Response

lessons

Post-Containment Threat Hunting

lessons

S3 Exposure Response

lessons

Short-Term Containment

lessons

Long-Term Containment

lessons

Show 5 more connections

Isolation

lesson

Response Automation

lesson

VLANs

lesson

Workload IR

lesson

Web App Incident Response

lessons

Related Lessons

5 lessons cover this concept

Understand the Blue Team Mission

General Beginner

Follow the Current Incident-Response Model

General Beginner

Measure Operations Without Gaming Them

General Beginner

Exercise the Response Capability Safely

General Beginner

Learn with Safety and Accountability

General Beginner