since the node is on alert, that would be Hacking + Exploit against the node’s Firewall(5) + System(5) + Alert(4)
note that there is nothing preventing you form data searching and trasnfering files, once you log in (except, you'll be doing so under fire).
the best try as to perform admin operations would be to unload IC, there is still fairly far away to shutdowning the node in terms of time (at least 5 more init passes, maybe 8 )