A cybersecurity analyst detects fileless malware activity on secure endpoints. What should be done next?

Fileless malware resides in memory and does not leave traditional file artifacts, making it difficult for

antivirus solutions to detect. The most effective next step is to isolate the endpoints to prevent

lateral movement and perform memory forensics to capture volatile data and identify any running

malicious processes.