When a digital break-in, virus/worm outbreak or Trojan-horse is suspected within the organization, the investigation process requires technical know-how and careful execution to preserve and gather as much information about the incident as possible. In this service, the objective is to treat the suspected or confirmed incident similar to that of a crime scene. Evidence is gathered and collected and later analyzed. This type of investigation can then progress to include local or international law-enforcement agencies to track down suspected attackers.