Containment and eradication are two phases of incident response. Containment limits the damage and keeps the attack from spreading, for example by isolating a device from the network or disabling a compromised account. Eradication removes the root cause: it deletes the malware, fixes the exploited vulnerability and removes the attacker's access before the team moves on to recovery.
How TecnetOne handles it: Incident Response
incident containment, threat eradication, incident response phases, device isolation, containment strategy