Security+ Incident Response Quick Reference

Prepare → Detect/Analyze → Contain → Eradicate → Recover → Learn.

Preserve evidence, document decisions, communicate through approved channels and maintain chain of custody where appropriate.