Consider the following scenario. You get an alert from the IDS telling you that somebody is trying to connect repeatedly to port 3389 of the computer at 192.168.2.124. While you are sitting at the computer, the mouse pointer starts moving by itself. Evaluate this scenario and describe the correct response including the following:

a. Describe what your mental approach to these events should be.
b. describe what you should do to isolate the affected computer.

c. After the computer is isolated, describe what should be investigated next.

d. List people who should be notified.

e. Describe what you could learn by a subsequent review of the firewall and IDS logs.