Triage the attack. Spend resources wisely. Keep the company alive.
A simulated company network is under attack. Ten incident-response hours remain.
Choose one action per hour. Actions have simulated defensive effects.