The Ability to Hold Intruders Accountable in a Court of Law

The ability to hold intruders accountable in a court of law is important. Which of the following activities are needed to ensure the highest possibility for successful prosecution?

A) Establishing Enterprise-owned Botnets for preemptive attacks
B) Collaboration with law enforcement
C) Well established and defined and defined digital forensics process
D) Be able to retaliate under the framework of Active defense