docs/images/react_navigator_export_v5.svg

<?xml version="1.0" standalone="no"?>
<svg width="1056" height="816" xmlns="http://www.w3.org/2000/svg" id="svgvm2"><g transform="translate(5,5)" style="font-family: sans-serif;"><g><rect width="1046" height="96" style="stroke: black; stroke-width: 1; fill: white;"/><g transform="translate(0,0)"><rect width="523" height="48" style="stroke-width: 1; stroke: black; fill: white;"/><text transform="translate(6, 32)" dx="0" dy="0" font-size="18pt" fill="black" style="font-weight: bold;"><tspan x="0" dy="0em">RE&amp;CT Enterprise Matrix</tspan></text></g><g transform="translate(0,48)"><rect width="523" height="48" style="stroke-width: 1; stroke: black; fill: white;"/><text transform="translate(6, 11.5)" dx="0" dy="0" font-size="12pt" fill="black"><tspan x="0" dy="0" y="18.5">Response Stages and Response Actions, colorized by Categories</tspan></text></g><line x1="0" x2="1046" y1="96" y2="96" style="stroke: black; stroke-width: 3;"/><g transform="translate(523,0)"><rect width="523" height="96" style="stroke-width: 1; stroke: black; fill: white;"/><text transform="translate(180, 55)" dx="0" dy="0" font-size="20pt" fill="black" style="font-weight: bold;">Categories</text><g transform="translate(6,2)"><text transform="translate(16,9)" font-size="9.5pt" fill="black" dx="0" dy="0"><tspan x="0" dy="0em">General</tspan></text><rect width="10" height="10" style="stroke-width: 1; stroke: black; fill: rgb(255, 211, 0);"/></g><g transform="translate(6,15.6666666)"><text transform="translate(16,9)" font-size="9.5pt" fill="black" dx="0" dy="0"><tspan x="0" dy="0em">Network</tspan></text><rect width="10" height="10" style="stroke-width: 1; stroke: black; fill: rgb(171, 197, 48);"/></g><g transform="translate(6,29.3333332)"><text transform="translate(16,9)" font-size="9.5pt" fill="black" dx="0" dy="0"><tspan x="0" dy="0em">Email</tspan></text><rect width="10" height="10" style="stroke-width: 1; stroke: black; fill: rgb(1, 194, 109);"/></g><g transform="translate(6,42.9999998)"><text transform="translate(16,9)" font-size="9.5pt" fill="black" dx="0" dy="0"><tspan x="0" dy="0em">File</tspan></text><rect width="10" height="10" style="stroke-width: 1; stroke: black; fill: rgb(0, 123, 132);"/></g><g transform="translate(6,56.6666664)"><text transform="translate(16,9)" font-size="9.5pt" fill="black" dx="0" dy="0"><tspan x="0" dy="0em">Process</tspan></text><rect width="10" height="10" style="stroke-width: 1; stroke: black; fill: rgb(7, 81, 144);"/></g><g transform="translate(6,70.333333)"><text transform="translate(16,9)" font-size="9.5pt" fill="black" dx="0" dy="0"><tspan x="0" dy="0em">Configuration</tspan></text><rect width="10" height="10" style="stroke-width: 1; stroke: black; fill: rgb(134, 48, 140);"/></g><g transform="translate(6,83.9999996)"><text transform="translate(16,9)" font-size="9.5pt" fill="black" dx="0" dy="0"><tspan x="0" dy="0em">Identity</tspan></text><rect width="10" height="10" style="stroke-width: 1; stroke: black; fill: rgb(72, 37, 105);"/></g></g></g><g transform="translate(0,97)"><g transform="translate(0, 0)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="14.618556701030927" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 6.904639175257731)" dx="0" dy="0" style="fill: black; font-weight: bold;"><tspan x="0" dy="0em">Preparation</tspan></text><text font-size="6pt" transform="translate(3, 13.713917525773196)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0em">95 items</tspan></text></g><g transform="translate(0,14.618556701030927)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Practice</tspan></text></g><g transform="translate(0,7.309278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Take trainings</tspan></text></g><g transform="translate(0,14.618556701030927)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Raise personnel awareness</tspan></text></g><g transform="translate(0,21.927835051546392)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Make personnel report suspicious activity</tspan></text></g><g transform="translate(0,29.237113402061855)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Set up relevant data collection</tspan></text></g><g transform="translate(0,36.54639175257732)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Set up a centralized long-term log storage</tspan></text></g><g transform="translate(0,43.855670103092784)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Develop communication map</tspan></text></g><g transform="translate(0,51.16494845360825)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Make sure there are backups</tspan></text></g><g transform="translate(0,58.47422680412371)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get network architecture map</tspan></text></g><g transform="translate(0,65.78350515463917)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get access control matrix</tspan></text></g><g transform="translate(0,73.09278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Develop assets knowledge base</tspan></text></g><g transform="translate(0,80.4020618556701)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Check analysis toolset</tspan></text></g><g transform="translate(0,87.71134020618557)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access vulnerability management system logs</tspan></text></g><g transform="translate(0,95.02061855670102)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access external network flow logs</tspan></text></g><g transform="translate(0,102.3298969072165)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access internal network flow logs</tspan></text></g><g transform="translate(0,109.63917525773195)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access internal HTTP logs</tspan></text></g><g transform="translate(0,116.94845360824742)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access external HTTP logs</tspan></text></g><g transform="translate(0,124.25773195876289)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access internal DNS logs</tspan></text></g><g transform="translate(0,131.56701030927834)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access external DNS logs</tspan></text></g><g transform="translate(0,138.8762886597938)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access VPN logs</tspan></text></g><g transform="translate(0,146.18556701030928)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access DHCP logs</tspan></text></g><g transform="translate(0,153.49484536082474)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access internal packet capture data</tspan></text></g><g transform="translate(0,160.8041237113402)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Access external packet capture data</tspan></text></g><g transform="translate(0,168.11340206185565)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block external IP address</tspan></text></g><g transform="translate(0,175.42268041237114)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block internal IP address</tspan></text></g><g transform="translate(0,182.7319587628866)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block external domain</tspan></text></g><g transform="translate(0,190.04123711340205)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block internal domain</tspan></text></g><g transform="translate(0,197.35051546391753)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block external URL</tspan></text></g><g transform="translate(0,204.659793814433)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block internal URL</tspan></text></g><g transform="translate(0,211.96907216494844)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block port external communication</tspan></text></g><g transform="translate(0,219.2783505154639)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block port internal communication</tspan></text></g><g transform="translate(0,226.58762886597938)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block user external communication</tspan></text></g><g transform="translate(0,233.89690721649484)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block user internal communication</tspan></text></g><g transform="translate(0,241.2061855670103)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find data transferred by content pattern</tspan></text></g><g transform="translate(0,248.51546391752578)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block data transferring by content pattern</tspan></text></g><g transform="translate(0,255.82474226804123)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list data transferred</tspan></text></g><g transform="translate(0,263.1340206185567)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to collect transferred data</tspan></text></g><g transform="translate(0,270.44329896907215)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to identify transferred data</tspan></text></g><g transform="translate(0,277.7525773195876)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Find data transferred by content pattern</tspan></text></g><g transform="translate(0,285.06185567010306)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list users opened email message</tspan></text></g><g transform="translate(0,292.37113402061857)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list email message receivers</tspan></text></g><g transform="translate(0,299.680412371134)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block email domain</tspan></text></g><g transform="translate(0,306.9896907216495)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block email sender</tspan></text></g><g transform="translate(0,314.29896907216494)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to delete email message</tspan></text></g><g transform="translate(0,321.6082474226804)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to quarantine email message</tspan></text></g><g transform="translate(0,328.91752577319585)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to collect email message</tspan></text></g><g transform="translate(0,336.2268041237113)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list files created</tspan></text></g><g transform="translate(0,343.5360824742268)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list files modified</tspan></text></g><g transform="translate(0,350.8453608247423)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list files deleted</tspan></text></g><g transform="translate(0,358.1546391752577)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list files downloaded</tspan></text></g><g transform="translate(0,365.4639175257732)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list files with tampered timestamps</tspan></text></g><g transform="translate(0,372.77319587628864)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find file by path</tspan></text></g><g transform="translate(0,380.0824742268041)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find file by metadata</tspan></text></g><g transform="translate(0,387.39175257731955)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find file by hash</tspan></text></g><g transform="translate(0,394.70103092783506)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find file by format</tspan></text></g><g transform="translate(0,402.0103092783505)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find file by content pattern</tspan></text></g><g transform="translate(0,409.319587628866)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to collect file</tspan></text></g><g transform="translate(0,416.62886597938143)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to quarantine file by path</tspan></text></g><g transform="translate(0,423.9381443298969)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to quarantine file by hash</tspan></text></g><g transform="translate(0,431.24742268041234)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to quarantine file by format</tspan></text></g><g transform="translate(0,438.5567010309278)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to quarantine file by content pattern</tspan></text></g><g transform="translate(0,445.8659793814433)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to remove file</tspan></text></g><g transform="translate(0,453.17525773195877)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to analyse file hash</tspan></text></g><g transform="translate(0,460.4845360824742)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to analyse Windows PE</tspan></text></g><g transform="translate(0,467.7938144329897)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to analyse macos macho</tspan></text></g><g transform="translate(0,475.10309278350513)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to analyse Unix ELF</tspan></text></g><g transform="translate(0,482.4123711340206)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to analyse MS office file</tspan></text></g><g transform="translate(0,489.72164948453604)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to analyse PDF file</tspan></text></g><g transform="translate(0,497.03092783505156)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to analyse script</tspan></text></g><g transform="translate(0,504.340206185567)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list processes executed</tspan></text></g><g transform="translate(0,511.64948453608247)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find process by executable path</tspan></text></g><g transform="translate(0,518.9587628865979)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find process by executable metadata</tspan></text></g><g transform="translate(0,526.2680412371134)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find process by executable hash</tspan></text></g><g transform="translate(0,533.5773195876288)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find process by executable format</tspan></text></g><g transform="translate(0,540.8865979381443)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to find process by executable content pattern</tspan></text></g><g transform="translate(0,548.1958762886597)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block process by executable path</tspan></text></g><g transform="translate(0,555.5051546391752)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block process by executable metadata</tspan></text></g><g transform="translate(0,562.8144329896907)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block process by executable hash</tspan></text></g><g transform="translate(0,570.1237113402061)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to block process by executable format</tspan></text></g><g transform="translate(0,577.4329896907217)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4">Get ability to block process by executable content pattern</tspan></text></g><g transform="translate(0,584.7422680412371)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Manage remote computer management system policies</tspan></text></g><g transform="translate(0,592.0515463917526)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list registry keys modified</tspan></text></g><g transform="translate(0,599.360824742268)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list registry keys deleted</tspan></text></g><g transform="translate(0,606.6701030927835)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list registry keys accessed</tspan></text></g><g transform="translate(0,613.979381443299)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list registry keys created</tspan></text></g><g transform="translate(0,621.2886597938144)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list services created</tspan></text></g><g transform="translate(0,628.5979381443299)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list services modified</tspan></text></g><g transform="translate(0,635.9072164948453)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list services deleted</tspan></text></g><g transform="translate(0,643.2164948453608)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to remove registry key</tspan></text></g><g transform="translate(0,650.5257731958762)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to remove service</tspan></text></g><g transform="translate(0,657.8350515463917)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Manage identity management system</tspan></text></g><g transform="translate(0,665.1443298969072)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to lock user account</tspan></text></g><g transform="translate(0,672.4536082474226)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to list users authenticated</tspan></text></g><g transform="translate(0,679.7628865979382)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to revoke authentication credentials</tspan></text></g><g transform="translate(0,687.0721649484536)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Get ability to remove user account</tspan></text></g></g></g><g transform="translate(174.33333333333334, 0)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="14.618556701030927" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 6.904639175257731)" dx="0" dy="0" style="fill: black; font-weight: bold;"><tspan x="0" dy="0em">Identification</tspan></text><text font-size="6pt" transform="translate(3, 13.713917525773196)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0em">56 items</tspan></text></g><g transform="translate(0,14.618556701030927)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List victims of security alert</tspan></text></g><g transform="translate(0,7.309278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List host vulnerabilities</tspan></text></g><g transform="translate(0,14.618556701030927)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Put compromised accounts on monitoring</tspan></text></g><g transform="translate(0,21.927835051546392)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts communicated with internal domain</tspan></text></g><g transform="translate(0,29.237113402061855)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts communicated with internal IP</tspan></text></g><g transform="translate(0,36.54639175257732)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts communicated with internal URL</tspan></text></g><g transform="translate(0,43.855670103092784)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Analyse domain name</tspan></text></g><g transform="translate(0,51.16494845360825)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Analyse IP</tspan></text></g><g transform="translate(0,58.47422680412371)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Analyse uri</tspan></text></g><g transform="translate(0,65.78350515463917)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts communicated by port</tspan></text></g><g transform="translate(0,73.09278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts connected to VPN</tspan></text></g><g transform="translate(0,80.4020618556701)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts connected to intranet</tspan></text></g><g transform="translate(0,87.71134020618557)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List data transferred</tspan></text></g><g transform="translate(0,95.02061855670102)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Collect transferred data</tspan></text></g><g transform="translate(0,102.3298969072165)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Identify transferred data</tspan></text></g><g transform="translate(0,109.63917525773195)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts communicated with external domain</tspan></text></g><g transform="translate(0,116.94845360824742)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts communicated with external IP</tspan></text></g><g transform="translate(0,124.25773195876289)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List hosts communicated with external URL</tspan></text></g><g transform="translate(0,131.56701030927834)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Find data transferred by content pattern</tspan></text></g><g transform="translate(0,138.8762886597938)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List users opened email message</tspan></text></g><g transform="translate(0,146.18556701030928)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Collect email message</tspan></text></g><g transform="translate(0,153.49484536082474)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">List email message receivers</tspan></text></g><g transform="translate(0,160.8041237113402)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Make sure email message is phishing</tspan></text></g><g transform="translate(0,168.11340206185565)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Extract observables from email message</tspan></text></g><g transform="translate(0,175.42268041237114)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List files created</tspan></text></g><g transform="translate(0,182.7319587628866)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List files modified</tspan></text></g><g transform="translate(0,190.04123711340205)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List files deleted</tspan></text></g><g transform="translate(0,197.35051546391753)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List files downloaded</tspan></text></g><g transform="translate(0,204.659793814433)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List files with tampered timestamps</tspan></text></g><g transform="translate(0,211.96907216494844)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find file by path</tspan></text></g><g transform="translate(0,219.2783505154639)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find file by metadata</tspan></text></g><g transform="translate(0,226.58762886597938)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find file by hash</tspan></text></g><g transform="translate(0,233.89690721649484)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find file by format</tspan></text></g><g transform="translate(0,241.2061855670103)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find file by content pattern</tspan></text></g><g transform="translate(0,248.51546391752578)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Collect file</tspan></text></g><g transform="translate(0,255.82474226804123)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Analyse file hash</tspan></text></g><g transform="translate(0,263.1340206185567)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Analyse Windows PE</tspan></text></g><g transform="translate(0,270.44329896907215)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Analyse macos macho</tspan></text></g><g transform="translate(0,277.7525773195876)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Analyse Unix ELF</tspan></text></g><g transform="translate(0,285.06185567010306)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Analyse MS office file</tspan></text></g><g transform="translate(0,292.37113402061857)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Analyse PDF file</tspan></text></g><g transform="translate(0,299.680412371134)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Analyse script</tspan></text></g><g transform="translate(0,306.9896907216495)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List processes executed</tspan></text></g><g transform="translate(0,314.29896907216494)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find process by executable path</tspan></text></g><g transform="translate(0,321.6082474226804)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find process by executable metadata</tspan></text></g><g transform="translate(0,328.91752577319585)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find process by executable hash</tspan></text></g><g transform="translate(0,336.2268041237113)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find process by executable format</tspan></text></g><g transform="translate(0,343.5360824742268)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Find process by executable content pattern</tspan></text></g><g transform="translate(0,350.8453608247423)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List registry keys modified</tspan></text></g><g transform="translate(0,358.1546391752577)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List registry keys deleted</tspan></text></g><g transform="translate(0,365.4639175257732)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List registry keys accessed</tspan></text></g><g transform="translate(0,372.77319587628864)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List registry keys created</tspan></text></g><g transform="translate(0,380.0824742268041)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List services created</tspan></text></g><g transform="translate(0,387.39175257731955)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List services modified</tspan></text></g><g transform="translate(0,394.70103092783506)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List services deleted</tspan></text></g><g transform="translate(0,402.0103092783505)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">List users authenticated</tspan></text></g></g></g><g transform="translate(348.6666666666667, 0)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="14.618556701030927" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 6.904639175257731)" dx="0" dy="0" style="fill: black; font-weight: bold;"><tspan x="0" dy="0em">Containment</tspan></text><text font-size="6pt" transform="translate(3, 13.713917525773196)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0em">26 items</tspan></text></g><g transform="translate(0,14.618556701030927)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Patch vulnerability</tspan></text></g><g transform="translate(0,7.309278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block external IP address</tspan></text></g><g transform="translate(0,14.618556701030927)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block internal IP address</tspan></text></g><g transform="translate(0,21.927835051546392)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block external domain</tspan></text></g><g transform="translate(0,29.237113402061855)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block internal domain</tspan></text></g><g transform="translate(0,36.54639175257732)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block external URL</tspan></text></g><g transform="translate(0,43.855670103092784)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block internal URL</tspan></text></g><g transform="translate(0,51.16494845360825)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block port external communication</tspan></text></g><g transform="translate(0,58.47422680412371)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block port internal communication</tspan></text></g><g transform="translate(0,65.78350515463917)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block user external communication</tspan></text></g><g transform="translate(0,73.09278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block user internal communication</tspan></text></g><g transform="translate(0,80.4020618556701)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block data transferring by content pattern</tspan></text></g><g transform="translate(0,87.71134020618557)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block domain on email</tspan></text></g><g transform="translate(0,95.02061855670102)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Block sender on email</tspan></text></g><g transform="translate(0,102.3298969072165)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Quarantine email message</tspan></text></g><g transform="translate(0,109.63917525773195)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Quarantine file by format</tspan></text></g><g transform="translate(0,116.94845360824742)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Quarantine file by hash</tspan></text></g><g transform="translate(0,124.25773195876289)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Quarantine file by path</tspan></text></g><g transform="translate(0,131.56701030927834)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Quarantine file by content pattern</tspan></text></g><g transform="translate(0,138.8762886597938)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Block process by executable path</tspan></text></g><g transform="translate(0,146.18556701030928)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Block process by executable metadata</tspan></text></g><g transform="translate(0,153.49484536082474)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Block process by executable hash</tspan></text></g><g transform="translate(0,160.8041237113402)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Block process by executable format</tspan></text></g><g transform="translate(0,168.11340206185565)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Block process by executable content pattern</tspan></text></g><g transform="translate(0,175.42268041237114)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Disable system service</tspan></text></g><g transform="translate(0,182.7319587628866)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Lock user account</tspan></text></g></g></g><g transform="translate(523, 0)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="14.618556701030927" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 6.904639175257731)" dx="0" dy="0" style="fill: black; font-weight: bold;"><tspan x="0" dy="0em">Eradication</tspan></text><text font-size="6pt" transform="translate(3, 13.713917525773196)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0em">8 items</tspan></text></g><g transform="translate(0,14.618556701030927)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Report incident to external companies</tspan></text></g><g transform="translate(0,7.309278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Remove rogue network device</tspan></text></g><g transform="translate(0,14.618556701030927)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Delete email message</tspan></text></g><g transform="translate(0,21.927835051546392)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Remove file</tspan></text></g><g transform="translate(0,29.237113402061855)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Remove registry key</tspan></text></g><g transform="translate(0,36.54639175257732)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Remove service</tspan></text></g><g transform="translate(0,43.855670103092784)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Revoke authentication credentials</tspan></text></g><g transform="translate(0,51.16494845360825)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Remove user account</tspan></text></g></g></g><g transform="translate(697.3333333333334, 0)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="14.618556701030927" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 6.904639175257731)" dx="0" dy="0" style="fill: black; font-weight: bold;"><tspan x="0" dy="0em">Recovery</tspan></text><text font-size="6pt" transform="translate(3, 13.713917525773196)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0em">14 items</tspan></text></g><g transform="translate(0,14.618556701030927)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Reinstall host from golden image</tspan></text></g><g transform="translate(0,7.309278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Restore data from backup</tspan></text></g><g transform="translate(0,14.618556701030927)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Unblock blocked IP</tspan></text></g><g transform="translate(0,21.927835051546392)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Unblock blocked domain</tspan></text></g><g transform="translate(0,29.237113402061855)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Unblock blocked URL</tspan></text></g><g transform="translate(0,36.54639175257732)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Unblock blocked port</tspan></text></g><g transform="translate(0,43.855670103092784)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(171, 197, 48);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Unblock blocked user</tspan></text></g><g transform="translate(0,51.16494845360825)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Unblock domain on email</tspan></text></g><g transform="translate(0,58.47422680412371)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Unblock sender on email</tspan></text></g><g transform="translate(0,65.78350515463917)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(1, 194, 109);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Restore quarantined email message</tspan></text></g><g transform="translate(0,73.09278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(0, 123, 132);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Restore quarantined file</tspan></text></g><g transform="translate(0,80.4020618556701)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(7, 81, 144);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Unblock blocked process</tspan></text></g><g transform="translate(0,87.71134020618557)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(134, 48, 140);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Enable disabled service</tspan></text></g><g transform="translate(0,95.02061855670102)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(72, 37, 105);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: white;"><tspan x="0" dy="0" y="4.154639175257731">Unlock locked user account</tspan></text></g></g></g><g transform="translate(871.6666666666667, 0)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="14.618556701030927" style="stroke: rgb(0, 0, 0); fill: white;"/><text font-size="6pt" transform="translate(3, 6.904639175257731)" dx="0" dy="0" style="fill: black; font-weight: bold;"><tspan x="0" dy="0em">Lessons Learned</tspan></text><text font-size="6pt" transform="translate(3, 13.713917525773196)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0em">2 items</tspan></text></g><g transform="translate(0,14.618556701030927)"><g transform="translate(0,0)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Develop incident report</tspan></text></g><g transform="translate(0,7.309278350515464)"><rect width="174.33333333333334" height="7.309278350515464" style="stroke: rgb(0, 0, 0); fill: rgb(255, 211, 0);"/><text font-size="5pt" transform="translate(3, 2)" dx="0" dy="0" style="fill: black;"><tspan x="0" dy="0" y="4.154639175257731">Conduct lessons learned exercise</tspan></text></g></g></g></g></g></svg>