Rapid incident response to cyber attacks