Q89
Single choice
As part of the lessons-learned phase, the SOC is tasked with building methods to detect if a previous incident is happening again.
Which of the following would allow the security analyst to alert the SOC if an event is reoccurring?