Hypothetical Break-In

Consider the following five questions and write a response to each one. How do you go about finding information when you have been told that there has been a break-in? What servers were compromised? Was network equipment comprised? What user accounts were employed to do gain access? What vulnerabilities were exploited? What can be done to prevent a recurrence?