CompTIA SecurityX (CAS-005) CAS-005 — Question 369

During post-incident analysis of a recent website outage, an incident response team identifies the following commands that were run from a compromised internal machine: Which of the following should the team do?