John works as a security manager in Mariotx.Inc. He has been tasked to resolve a network attackissue. To solve the problem, he first examines the critical information about the attacker'sinteraction…

John works as a security manager in Mariotx.Inc. He has been tasked to resolve a network attackissue. To solve the problem, he first examines the critical information about the attacker'sinteraction to the network environment. He prepares a past record and behavioral document ofthe attack to find a direction of the solution. Then he decides to perform an action based on theprevious hypothesis and takes the appropriate action against the attack. Which of the followingstrategies has John followed?