As an information security manager of HDA Inc., you have been informed about a recent alert from IDS in which one of HDA’s internal PCs is communicating to a blacklisted IP address. Which of the following would you use to determine the details of the incident?