Question $44$

$1$ pts

Which of the following is a type of forensics evidence acquisition that may be considered an overlap between traditional hard drive forensics and network forensics?

Collecting NIDS$/$NIPS alerts

Locating relevant DNS events from a central log server

Preserving server event logs stored locally

Extracting a cross$-$device events query result from the SIEM