If your actions lead to steps such as mitigating damage, protecting data loss, or re-establishing operations. welcome to incident response. I can pass along several courses that will fill that knowledge gap. The digital forensic sleuth in you may lead down a path where when you kick off the investigation role, you are able to find the one bird that disrupted the wave. A little tip, remember there can be more than one bird.and more than one wave. Also, as the waves roll towards you, consider that an ocean wave may have travelled halfway around the world.