Skip to content

Glossary: Incident Response and Resilience

eradication

Also written: eradicate

The phase that removes the cause: the malware, the attacker's accounts, their persistence, and the hole they came in by. It is often done by rebuilding from a clean image.

Where the book teaches it

Related terms

containmentpersistencegolden image