We'll talk about getting a baseline for your systems/environment so that you have something to compare if an incident is suspected