DDoS incidents: separating technical facts from media noise

A look at how to document an incident, distinguish evidence from headlines and communicate clearly while an attack is in progress.