CompTIA Security+ (SY0-701) SY0-701 — Question 58

During an investigation, an incident response team attempts to understand the source of an incident. Which of the following incident response activities describes this process?