Step By Step Through Enterprise Password Resets

Incident remediation is comprised of four phases: posturing, containment, eradication and longer-term security enhancements. During an active incident, the most crucial phase is eradication, which encompasses the actions taken to completely eliminate an attacker’s access to regain control of an environment. Based on observations during Mandiant Incident Response engagements, eradication commonly includes the coordinated completion of an enterprise password reset.