A.Log

B.Incident

C.Ticket

D.Alert

E.Event

A.NIST Open

B.SANS Stateful

C.SANS Open

D.NIST Stateful

A.Create a Runbook

B.Set the Response Task's state

C.Create a Flow

D.Create a Knowledge Article

A.State of the phishing email

B.IP addresses from the header

C.URLs, domains, or IP addresses appearing in the body

D.Type of Ingestion Rule used to identify this email as a phishing attempt

E.Hashes and/or file names found in the EML attachment

F.Who reported the phishing attempt

A.the Risk Score script include

B.addition

C.an arithmetic mean

D.a geometric mean