top of page
I07
Containment & Incident Response
A suspected rogue agent is isolated together with its memory and communication history, its privileges revoked, and attempts to rejoin under a new identity are detected.
WHAT IT ADDRESSES
Containment that leaves memory and credentials intact leaves the compromise intact.
VERIFICATION METHOD
Tabletop or live isolation of one agent, including re-entry detection.
OWASP T&M
bottom of page