https://remotelyroot.github.io/posts/incident-response-process/