Which sequence best outlines a ransomware containment workflow using Tanium Threat Response?

Which sequence best outlines a ransomware containment workflow using Tanium Threat Response?

• A. Isolate affected endpoints, detect, stop malicious processes, collect artifacts, apply remediation, and coordinate with SOC for recovery.
• B. Detect, isolate affected endpoints, stop malicious processes, collect artifacts, apply remediation, and coordinate with SOC for recovery.
• C. Collect artifacts, enable RBAC, install Relays, coordinate with SOC, and never isolate.
• D. Isolate endpoints first, then patch all systems, reboot endpoints, and notify users.

Answer: (B)