Boardroom Forum invitations open this summer
About Search FAQ
IRC Incident Response Consortium Est. 2017 Join the community
About Forums Boardroom Forum Practitioner Forum Partners Forum Events Past events Past Presentations Resources Playbook Policy Engine Books and frameworks Useful links Job board Document library Breach Budget Game Practitioner Runbooks Blog Training Learning paths Mentor matching Partners disclosure Membership tiers FAQ Contact Join the community →
Home/ Resources/ Playbook Policy Engine/ Root Access

Root Access.

Unauthorized root access has been detected. This playbook walks the response through all seven phases of the NIST incident response process: Prepare, Detect, Analyze, Contain, Eradicate, Recover, and Post-Incident Handling.

Download PDF Download Visio source
01

Prepare

Root Access — Prepare phase flowchart
02

Detect

Root Access — Detect phase flowchart
03

Analyze

Root Access — Analyze phase flowchart
04

Contain

Root Access — Contain phase flowchart
05

Eradicate

Root Access — Eradicate phase flowchart
06

Recover

Root Access — Recover phase flowchart
07

Post-Incident Handling

Root Access — Post-Incident Handling phase flowchart
Download PDF Download Visio source

Open source. Built and refined by the IRC community since 2017. Spotted something to improve? Email hello@incidentresponse.com.

← Back to the gallery