An adversary has managed to compromise $12$ servers on your network and collect sensitive data. You have isolated all affected servers and blocked the adversary$$s method of communicating with them. You are now in the process of trying to eliminate all attack vectors and persistence mechanisms. You are confirming that all systems are either fully under the control of authorized users or are wiped. Which phase of the incident response process are you in$?$

An adversary has managed to compromise $12$ servers on your network and collect sensitive data. You have isolated all affected servers and blocked the adversary$$s method of communicating with them. You are now in the process of trying to eliminate all attack vectors and persistence mechanisms. You are confirming that all systems are either fully under the control of authorized users or are wiped. Which phase of the incident response process are you in$?$

Eradication

Confirmation

Containment

Recovery