Your technology team is currently restoring data from backup storage locations. Which NIST IR phase does this activity fall under?
Containment, eradication, and recovery
Post incident activity
Detection and analysis
Preparation
Next Concept