From the list below please select the best option regarding what should be created during the last phase of Incident Response.

Question $4$ options:

Indicators of Compromise $($IoC$)$

None of the answers are correct

Indicators of Attack $($IoA$)$

Chain of Custody