SY0-601 Web TestEngine demo

Shut down the VDI and copy off the event logs.

Take a memory snapshot of the running system.

Use NetFlow to identify command-and-control IPs.

Run a full on-demand scan of the root volume.