ID: RS0004

Remove a threat from an environment.

Response Actions

ID Name Description
RA4001 Report incident to external companies Report incident to external companies
RA4101 Remove rogue network device Remove a rogue network device
RA4201 Delete email message Delete an email message from an Email Server and users' email boxes
RA4301 Remove file Remove a specific file from a (remote) host or a system
RA4501 Remove registry key Remove a registry key
RA4502 Remove service Remove a service
RA4601 Revoke authentication credentials Revoke authentication credentials
RA4602 Remove user account Remove a user account