Q36
Multiple choice
A company's SICM is continuously reporting false positives and false negatives. The security operations team has implemented configuration changes to troubleshoot possible reporting errors.
Which of the following sources of information best supports the required analysts process? (Select two).
Select all that apply.