What to do when you suspect a breach
A practical visual guide that completes the task safely, verifies the result, and highlights mistakes to avoid.
Before you start
- ✓ Authorized secure access
- ✓ A backup before impactful changes
- ✓ The correct domain or account
- ✓ A record of current values before editing
Confirm the target and outcome
Record the service, domain, and expected outcome, then confirm you are working on the correct account before changing anything.
Open the correct tool
Open security and backup tools and follow the linked official workflow, confirming the domain name before saving.
Complete the change carefully
Isolate the site, preserve logs and the current image, rotate credentials from a clean device, and report timing and symptoms to ROT4.
Verify the result
After cleanup review users, jobs, DNS, mail, and files, then monitor for recurring indicators.
Core steps complete
Test the result, record final settings, and contact ROT4 if an error appears.
