Incident Response: Lessons from the front lines of Fortune 500 cyber attacks