A security analyst is conducting a post-incident log analysis to determine which indicators can be used to detect further occurrences of a data exfiltration incident.
The analyst determines backups were not performed during this time and reviews the following:
Which of the following should the analyst review to find out how the data was exfiltrated?
A Security Anal 1 (60.07 KiB) Viewed 59 times
A. Monday's logs
B. Tuesday's logs
C. Wednesday's logs
D. Thursday's logs Most Voted
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!