What should an Incident Responder do to mitigate a false positive?

What should an Incident Responder do to mitigate a false positive?
A . Add to Whitelist
B . Run an indicators of compromise (IOC) search
C . Submit to VirusTotal
D . Submit to Cynic

View Answer

Answer: B