What is evidence?
a. Any hardware, software, or data that can be used to verify the identity or activity of an attacker
b. Any hardware, software, or data that is admissible in a court of law and used to verify the identity or activity of an attacker
c. Only hardware, software, or data collected by a law enforcement officer that can be used to verify the identity or activity of an attacker
d. Any hardware, software, or data that was collected during an incident investigation
Answer: a. Any hardware, software, or data that can be used to verify the identity or activity of an attacker