Câu 64: 350-201: Performing CyberOps Using Core Security Technologies (CBRCOR)

The SIEM tool informs a SOC team of a suspicious file. The team initializes the analysis with an automated sandbox tool, sets up a controlled laboratory to examine the malware specimen, and proceeds with behavioral analysis. What is the next step in the malware analysis process?

1. A. Perform static and dynamic code analysis of the specimen. — đáp án hiện tại
2. B. Unpack the specimen and perform memory forensics.
3. C. Contain the subnet in which the suspicious file was found.
4. D. Document findings and clean-up the laboratory.