Q64
Single choice
An organization has not had an incident for several months. The Chief Information Security Officer (CISO) wants to move to a more proactive stance for security investigations.
Which of the following would BEST meet that goal?