Microsoft 365 Business Premium security operations guide https://docs.microsoft.com/en-us/microsoft-365/business-premium/m365bp-security-incident-quick-start?view=o365-worldwide
DATA CARE ASAP