NIST SP 800-61

Handling an Incident

2. Detection and Analysis


Figure 3–2. Incident Response Life Cycle (Detection and Analysis)