After the breach: Uncovering the full scope of the attack

Following an incident, every major decision depends on knowing exactly what happened.