US-CERT - Targeted Cyber Intrusion Detection and Mitigation Strategies
This guidance from CISA applies to organizations whose networks have been compromised by a cyber attack as well as to those desiring to improve their network security preparedness to respond to a cyber incident.