can you answer me this question how would you do it? . Employees reporting on suspicious email allegedly from the corporate InfoSec department instructing them to enter a link and change their password. What could be the risks and potential impact in such case? Write the investigation process, hypothetic findings and conclusions What would be your recommended containment action plan? What would be your recommended recovery plan? Local IT in Spain are complaining on a massive files corruption in few shared folders, they mentioned there is a strange suffix added to all files. The files can't be open no more by anyone. Write what can these symptoms imply on What would be your recommended investigation plan to confirm/confute your original assumption and to find the root cause for the incident? What would be your recommended containment action plan? What would be your recommended recovery plan? Its for my exam and I want to compare to someone with experience
