Which SecOps Investigate function provides the data needed to perform the different types of investigation from severity triage to detailed analysis and hunting?1 pointForensics and TelemetryDetailed AnalysisBreach ResponseChange Control

To determine which SecOps Investigate function provides the data needed to perform different types of investigation from severity triage to detailed analysis and hunting, let's break down each option:

1. Forensics and Telemetry:

   • Forensics involves the collection, preservation, and analysis of data to understand and respond to security incidents.
   • Telemetry refers to the automated collection and transmission of data from remote sources.
   • Together, Forensics and Telemetry provide comprehensive data that can be used for various types of investigations, including severity triage, detailed analysis, and hunting.

2. Detailed Analysis:

   • This is a specific type of investigation that involves in-depth examination of data to understand the nature and impact of a security incident.
   • While important, it does not encompass the broader range of data collection needed for all types of investigations.

3. Breach Response:

   • This function focuses on responding to security breaches, including containment, eradication, and recovery.
   • It is more about the actions taken after an incident is identified rather than the data collection needed for investigation.

4. Change Control:

   • This is a process used to manage changes in IT systems and infrastructure.
   • It is not directly related to the collection of data for security investigations.

Given these explanations, the correct answer is:

Forensics and Telemetry

This function provides the necessary data for performing different types of investigations, from severity triage to detailed analysis and hunting.