The ability to hold intruders accountable in a court of law is important.
Which of the following activities are needed to ensure the highest possibility for successful prosecution?
A . Establishing Enterprise-owned Botnets for preemptive attacks
B . Collaboration with law enforcement
C . Well established and defined and defined digital forensics process
D . Be able to retaliate under the framework of Active defense
Answer: C