SANS Incident Handler's Handbook and PICERL Methodology
Phase 3 - Containment

SANS Incident Handler's Handbook and PICERL Methodology PICERL-C3: Long-Term Containment

Apply temporary fixes allowing systems to be used in production while rebuilding clean systems

Other controls in Phase 3 - Containment

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SANS Incident Handler's Handbook and PICERL Methodology controls