SANS Incident Handler's Handbook and PICERL Methodology
Eradication

SANS Incident Handler's Handbook and PICERL Methodology PICERL-E-01: Eradication: Root Cause Analysis

Identify and document root causes including initial access vector, persistence mechanisms, lateral movement paths, and control failures, before applying eradication actions.

Maintained by Gerard BlokdykControl text last updated

Other controls in Eradication

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll SANS Incident Handler's Handbook and PICERL Methodology controls