The workstation was disconnected from the network at [Insert Time].
[Choose: Pending Analysis / Malicious / Benign]
The 303cru.zip file was moved to a secure quarantine folder for analysis.
[Example: "The file was downloaded from an untrusted third-party domain and triggered a signature-based alert from the local antivirus."] 4. Response Actions Taken
Update firewall rules to block the source domain associated with this download. Submit a file for malware analysis - Microsoft