Which step in the incident response process researches an attacking host through logs in a SIEM?

A.	detection and analysis
B.	preparation
C.	eradication
D.	containment