You see 100 HTTP GET and POST requests for various pages on one of your webservers. The user agent in the requests contain php code that, if executed, creates and writes to a new php file on the webserver.
Which category does this event fall under as defined in the Diamond Model of Intrusion?
A . delivery
B . reconnaissance
C . action on objectives
D . installation
E . exploitation
Answer: A