Comment by riverdroid

Besides that, lots of incident response work to figure out the scope and impact of the breach, I'd imagine.