"When was this machine infected?", (Sun, Aug 26th)

When responding to a malware incident, important questions to be answered are “How was the machine infected?” and “When was the machine infected?”.

Article Link: https://isc.sans.edu/diary/rss/24032