[Tutorial] How to investigate a DDoS attack on a web server