You have just identified and mitigated an active malware attack on a user's computer, in which command and control was established. What is the next step in the process?
Reporting
Recovery
Eradiction / Remediation
Lessons Learned