How to Mitigate and Contain a Virus

In this video, CBT Nuggets trainer Bob Salmans covers CMR: the three steps in dealing with a digital attack or an outbreak on your device — contain it, mitigate it, and recover from it.

The CMR method is a tried and true approach to dealing with a virus on your network or on a device. Watch along with Bob as he explains how to do each step properly.

Containing the threat means isolating the infected host or applications — that usually means pulling it off the network. Mitigation is the part of the process that reduces the impact of the virus and prevents future outbreak. Application whitelisting and blacklisting and applying quarantine measures is the key to mitigation. Recovery is the last part of the process, it calls for researching the threat itself and removing all traces from your devices and network.

Start learning with CBT Nuggets:

[ablesentry]

Thanks for a terrific, simple run-through. I didn't realise VMs could be used to investigate an infected machine.

[SoulJah]

I always thought that containment could be done by putting the infected device inside a blackhole VLAN - is that feasible?

[PlayaX]

i didnt like this video. it didnt really give ways to contain. more mitigation