Suppose that you have been alerted of a potential incident involving a suspected worm spreading via buffer overflow techniques, compromising Microsoft is web servers. As the IR team leader, it is your responsibility to determine the next steps.

Write a paper in which you: explain in detail the initial steps that would need to be made by you and the ir team in order to respond to this potential incident. Construct a process-flow diagram that illustrates the process of determining the incident containment strategy that would be used in this scenario, and identify which containment strategy would be appropriate in this case, through the use of graphical tools in visio, or an open source alternative such as dia.

Construct a process flow diagram to illustrate the process (es) for determining if / when notification of the incident should be relayed to upper management, and explain how those communications should be structured and relayed through the use of graphical tools in visio, or an open source alternative such as dia. Note: the graphically depicted solution is not included in the required page length. Detail the incident recovery processes for the resolution of this incident.