SANS Incident Handler's Handbook and PICERL Methodology
Containment

SANS Incident Handler's Handbook and PICERL Methodology PICERL-C-01: Containment: Short Term Containment Strategy

Apply short term containment such as network segmentation, host isolation, account disablement, or traffic blocking to stop ongoing damage while preserving evidence.

Maintained by Gerard BlokdykControl text last updated

Other controls in Containment

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SANS Incident Handler's Handbook and PICERL Methodology controls