2951
During an authorized retail-company assessment (RET-LAB-M08-2951), which evidence best supports an assessment of "Bettercap"?
View answer choices
- Tool events correlated with packet capture and target-side security alerts.
- A relationship graph retaining sources and transformation history.
- Workspace data showing module, source, timestamp, and scoped target.
- Search results validated against the organization’s current external inventory.