During an incident, the following actions have been taken: - Executing the malware in a sandbox environment - Reverse engineering the malware - Conducting a beh...