Received this in my Inbox a few days ago. Posting the resource for the people in the trenches or for those overseeing Incident Response.
Overview
This joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States. It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
Joint Cybersecurity Advisory