25
Marty Gillespie (mgg@dnaco.net)
Phase
4: Eradication
•The goal of
the Eradication phase is to remove the means by which the
incident occurred, as well as to shore up defenses to prevent
further attacks
–Root cause
resolution
–Protect against
attacks utilizing reconnaissance information