How to Fight a Security Fire Within 72 Hours

If you don’t know how long your network was compromised, how can you fight threats effectively and properly?

Persistence detections are one of the most common investigations done by incident response teams, and you must know what to do in the critical 72 hours following discovery. In this situation, the attacker has been in the network for months (or even years) and established a foothold within the network.

https://www.nextgov.com/ideas/2019/06/how-fight-security-fire-within-72-hours/158077/