major forensic and eradication effort. This effort should be followed by a major investment in security measures to keep cyber-espionage actors out of the network. Many inhouse security teams do not have the APT expertise to respond to a persistent threat