Câu 16: 312-39V2: Certified SOC Analyst (CSA) v2

You are part of a team of SOC analysts in a multinational organization that processes large volumes of security logs from various sources, including firewalls, IDS, and authentication servers. Your team realizes they are facing difficulties to detect security incidents because logs from different systems are analyzed in isolation, making it harder to link related events. What approach should you implement for future forensic investigations to automatically match related log events based on predefined rules?

1. A. Log correlation — đáp án hiện tại
2. B. Log normalization
3. C. Log collection
4. D. Log transformation