Compromise Assessment

Definitions

1. An investigation aimed at determining whether an environment has already been breached, often by hunting for indicators, suspicious behaviors, and evidence of persistence. It is broader than one alert triage and narrower than a full open-ended hunt.

   In plain English: An investigation to find out whether attackers are already inside the environment.

   Example: "The company launched a compromise assessment after learning a key vendor had been breached weeks earlier."

Related Terms

• Incident Forensics
• Cloud Forensics
• Disk Forensics
• Forensic Investigation
• Incident Investigation
• Incident Timeline
• Intrusion Analysis
• Live Forensics