Problem Statement
Name some tools commonly used in incident detection and analysis.
Explanation
Popular tools include SIEMs like Splunk or QRadar, network monitors like Zeek, endpoint tools such as CrowdStrike, and forensics utilities like Volatility.
Each tool collects evidence, correlates alerts, and helps analysts make data-driven decisions.