Glossary: Logs and Data Sources for Investigations

Isolation

Also written: isolate, isolate, don't power off

Cutting a compromised machine off from the network so the attacker can't use it, while leaving it powered on. Turning it off would destroy the memory evidence, so you isolate first and capture memory before any shutdown.