System Recovery Prompt
Prompt
Plan system recovery from clean backups after containment and eradication to restore normal operations.
Why it works
Recovery from clean backups ensures attacker code isn't reintroduced. Testing prevents recovery failures.
Watch out for
Backups may be infected. Recovery can take days. Incomplete recovery leaves backdoors.
Used by
IT & Ops Teams