you suspect an attacker in your network

Which two methods will help to mitigate this type of activity?