An organization’s SOC team is notified of a host that is sharing a large volume of data outside normal business hours. After analyzing the results of the requested scan, the team discovers that files containing the Personally Identifiable Information of all employees have been compromised. Which two actions should the SOC team take next? (Choose two.)