Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
Eradication is the incident response phase that removes malware, persistence, and root causes from systems before recovery, per NIST SP 800-61.
Eradication Definition: Eradication is the incident response phase that removes malware, persistence, and root causes from systems before recovery, per NIST SP 800-61.
Eradication is the incident-response phase, defined in frameworks such as the NIST SP 800-61 lifecycle, in which the root cause and all attacker artifacts are removed from affected systems. This includes deleting malware, closing exploited vulnerabilities, eliminating persistence mechanisms, and disabling compromised accounts before recovery begins. Thorough eradication is essential to prevent reinfection or attacker re-entry once systems are restored to normal operation.
Eradication is one of the topics you'll master in the ECIH Boot Camp.
ECIH Boot Camp →