Which of the following in the incident response process is the BEST approach to improve the speed of the
identification phase?


A. Activate verbose logging in all critical assets.
B. Tune monitoring in order to reduce false positive rates.
C. Redirect all events to multiple syslog servers.
D. Increase the number of sensors present on the environment.