Joe, a user, upon arriving to work on Monday morning noticed several files were deleted from the system.
There were no records of any scheduled network outages or upgrades to the system. Joe notifies the security
department of the anomaly found and removes the system from the network.
Screenshots of systems
Call the local police
Perform a backup
Capture system image