✅ The verified answer to this question is available below. Our community-reviewed solutions help you understand the material better.
During routine monitoring, a SOC analyst sees a surge in failed VPN login attempts followed by successful access from a foreign IP. What analysis technique would best correlate these events?