Incident Response Process — Roadmap Step & Resources
The identify, contain, eradicate, recover and lessons-learned cycle for a real incident
- Level: intermediate
- Estimated time: 2 days
- Roadmap: Cybersecurity Analyst / Ethical Hacker
Before this step
Interview questions
- Walk me through how you'd respond to a confirmed ransomware infection.
Study resources
- NIST Computer Security Incident Handling Guide (PDF) — NIST's official, authoritative Special Publication 800-61 on incident handling.
- Incident Response Process Explained (Video) — Covers the identify, contain, eradicate, recover and lessons-learned cycle.
- Managing Incidents (Article) — The chapter on incident management from Google's free, authoritative SRE book.
Part of
- Security Operations — section
- Cybersecurity Analyst / Ethical Hacker roadmap — the full learning path