Test your knowledge: Incident management — Question 4

Which member of the security operations team conducts a detailed examination to uncover the truth and meaning in an incident?