Techniques for digital forensics and incident response

When it's too late to stop an attack, the next urgent task is to find out what happened and assess the damage.