Louise would like to identify compromised systems on her network that may be participating in a botnet. She plans to do this by watching for connections made to known command$-$and$-$control servers. Which technique is most likely to provide this information $-$ if she has access to a list of known servers?

Group of answer choices

IDS logs

RFC logs

Authentication logs

Netflow records