In Network Defense & Monitoring, what is the FIRST step a CCD professional should take when encountering a new case or situation?