A security professional assumes the network is under siege and is searching for evidence to see if it has indeed been breached. What is the security professional doing?

Group of answer choices

Developing a use case for future reference

Responding to a known incident

Penetration testing

Threat hunting