After two separate waves of hacks that targeted its customer accounts, Salesforce has published a guide on how clients can investigate security breaches