Suspect a breach? Preserve evidence. Reduce harm.

Do not panic, wipe systems or start deleting suspicious files. A few careful decisions now can protect recovery options and the evidence needed later.