So you have either detected a compromise that has already happened or you have detected it and locked (hopefully) the offending attacker out of your system. Now what?

• 那么你要么已经监测到了已经发生的入侵,要么已经监测到了并且把入侵者驱逐出了您的系统之外?现在该做什么了呢?