Question 104:
Which step in the incident response process researches an attacking host through logs in a SIEM?
Answer options:
A. detection and analysis B. preparation C. eradication D. containment
Answer correct:
A