A security engineer discovers a PC may have been breached and accessed by an outside agent. The engineer wants to find out how this breach occurred before remediating the damage. Which of the following should the security engineer do FIRST to begin this investigation?A. Create an image of the hard driveB. Capture the incoming and outgoing network trafficC. Dump the contents of the RAMD. Parse the PC logs for information on the attacker.