Which of the following is the BEST resource to use to start the investigation?

An incident response team requires documentation for an email phishing campaign against a company’s email server.

Which of the following is the BEST resource to use to start the investigation?
A . Audit and system logs
B . Change management procedures
C . Departmental policies
D . Standard operating procedures

View Answer

Answer: A