Watch this video on YouTube
During which phase of the incident response process is the root cause of an incident typically determined and removed from the environment?