After an incident response exercise, a security administrator reviews the following table: Which of the following should the administrator do to best support ra...