Q82
Single choice
Which of the following is a type of intruder detection that involves logging network events to a file for an administrator to review later?