Which of the following is an outcome of the initial incident-response triage?
Initial incident triage rapidly analyzes and validates the incident to determine its scope and collect the information needed to prioritize subsequent response activities. Establishing whether in-scope systems use encryption is part of that assessment; account removal, network segmentation, and registry restoration are response or remediation actions taken later.
Community Discussion