Which of the following helps to establish an accurate timeline for a network intrusion?
A.
Hashing images of compromised systems
B.
Reviewing the date of the antivirus definition files
C.
Analyzing network traffic and device logs
D.
Enforcing DLP controls at the perimeter