a security analyst has identified malv/are spreading through the corporate network and has activated the csirt which of the following should the analyst do next?