| 1. Suspect Worm |
| 1.3. Widespread? |
 | 1.3.1. Activate Incident Response Team? |
| 1.1. Manual Analysis and Remediation Steps |
| 1.2. Wipe/Restore Machine |
| 1.4. Post-op Prevent Recurrence Policy |
| 1. Suspect Worm |
| 1.3. Widespread? |
| 1.3.1. Activate Incident Response Team? |
| 1.1. Manual Analysis and Remediation Steps |
| 1.2. Wipe/Restore Machine |
| 1.4. Post-op Prevent Recurrence Policy |