Test your knowledge: Alerts, notifications, and log optimization — Question 1

A security analyst has evidence that an employee is attempting actions against the organization's security guidelines. The security analyst plans to use the company's alert system to monitor this situation. Which kind of alert should they use?