What are the first three things you do when you detect a potential data exfiltration event at Moody's?
