What is the initial step to begin an investigation into a potential data leak after a former employee has deleted all their emails and files from Google Drive and the security team has discovered that some intellectual property may have been exposed on a public social media platform?