Overview of the Incident: A hacker gained access to the company's network through a phishing email that was sent to an employee. The employee unknowingly clicked on a malicious link in the email that instructed them to re-authenticate with their Windows Active Directory (AD) ID and password becau