Take your coffee because you will need it!
Be aware of next attacks by monitoring 24/7. When you notice an attack, start a detailed investigation and take your actions
Try to understand what is happening using all the data you have. Fortunately you have a lot of data.
Have you noticed a suspicious situation and do not know what to do? Run the playbooks and take action