A system administrator has monitored several areas of the network and local systems that are out of their normal ranges. The administrator begins to believe they have caught a hacker on the network. Analyzing their activities on the network provides what information? $($Select the three best options.$)$

A$.$ Tactic

B$.$ Technique

C$.$ Procedure

D$.$ Performance