Eradication

• Nuk’ Em from Orbit

• Determine cause of incident

• Improve defenses on target host

  • Firewall rule, IP change, new OS, etc

• Investigate trust model

  • Who else was compromised?

• Restore from CLEAN backup

  • Are you sure?

Previous slide

Next slide

Back to first slide

View graphic version