Which of the following should be checked FIRST?

An intrusion has been detected on a company’s network from the Internet. Which of the following should be checked FIRST?

A.
The firewall logs

B.
The DNS logs

C.
The access logs

D.
The performance logs