@silverwizard my friend wrote a really good article about thishttps://grimoire.ca/code/incident-response/