Describe a situation where you had to analyze a security incident, identify root cause, and recommend remediation.