Incident handling and containment
Outline the steps you would take to handle a security incident, from containment through remediation, and how you would document it.
The analyst performs incident handling by implementing containment, protection and remediation activities.
Source posting