An IT security engineer notices that the company’s web server is currently being hacked.

Unplug the network connection on the company’s web server.

Determine the origin of the attack and launch a counterattack.

Record as much information as possible from the attack.

Perform a system restart on the company’s web server.