Practical steps
- Escalate to your incident response team.
- Contain affected access according to your response plan.
- Preserve logs and a timeline of observations.
- Plan recovery using verified, trusted backups and professional support.
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.