Glossary: Security Operations and Incident Response

Isolation

Also written: isolate, quarantine the host

Cutting a running system off from the network so it can't spread malware or talk to the attacker, while its memory survives for forensics. Example: the EDR's one-click isolation of office-pc-07.