Glossary: Security Operations and Incident Response

Eradication

Also written: eradicate

Removing the cause of an incident (the malware, the persistence and the way in) and resetting exposed credentials. It comes after containment and before recovery.