Utilize Forensics Examination Process to: Identify Virus Signature Halt Continuing Infection Identify Entry Point Assist in Restoration *Verizon DBIR