Your strategy can’t be patch AFTER an intrusion. Only to build a hardened environment from scratch and be ready in advance.