Which step in the incident response process researches an attacking host through logs in a SIEM?
A) detection and analysis
B) preparation
C) eradication
D) containment

Question

Quizplus · Accepted Answer

The detection and analysis step involves identifying and understanding the nature of the incident, which includes researching the attacking host through logs in a SIEM.

Which Step in the Incident Response Process Researches an Attacking