Before, during and after a cyberattack