HIT Security investigates reported outbreaks of computer viruses in Health System imaged computers. This process begins with containment of the outbreak and restoration of affected computers back to a known safe state with restoration of data wherever warranted and possible. We then proceed with forensic analysis and interviews of affected computer users to identify possible causes then follow-up with security awareness training and assistance.