Ransomware is not a new threat; however, approaches to remediation have changed as attacks have grown. Real-time response and recovery is the secret sauce to get back to business faster and with minimal disruption. An alternative accelerated IR approach is becoming increasingly necessary to avoid business downtime. This approach has been used successfully to contain widespread attacks and recover systems with speed and precision. It is made up of the following seven key ingredients:Immediate threat visibility, active threat containment and accelerated forensic analysis.”]
Source: https://www.darkreading.com/crowdstrike/seven-key-ingredients-to-effective-incident-response