“1st rule of incident response, don’t attribute an action to maliciousness without first eliminating it as an act of stupidity”

— Brian Honan