As a member of the Incident Response team you use certain techniques to identify suspicious activities. You can identify what happened during a recent successful attack by looking in the

Question $48$ options:

Browser history

Audit logs

Sandbox

Firewall rules