The IR Lifecycle

Incident response is a repeatable process: preparation, detection and analysis, containment, eradication, recovery, and lessons learned. We map each phase.