My intention with this talk is to focus on the defence/incident response side of the security houseand walk through a real scenario that many businesses find themselves in on a daily basis. My aim isto cover the technical aspects of responding to event of this nature as well as distilling the potentialbusiness consequences.