ConceptsShort-Term Containment
Short-Term Containment
Immediate actions taken to stop an active incident from spreading or worsening, isolating hosts, blocking IPs, disabling accounts, while longer-term containment and eradication are planned.
0 direct links7 lessons
Concept Neighborhood
No connected concepts linked yet.
Related Lessons
7 lessons cover this conceptThe IR Role in Depth
SOC Analyst
Initial Incident Response: The First Hour
SOC Analyst
Containment Strategy: Short-Term and Long-Term Trade-Offs
SOC Analyst
Eradication and Recovery: Removing Attackers and Restoring Operations
SOC Analyst
Communication During Incidents
SOC Analyst
Post-Incident Review and Learning
SOC Analyst
Specific Incident Types and Their Patterns
SOC Analyst
Sign in to open lesson content directly.