Which of the following steps are part of the Security Information and Event Management (SIEM) process?
A) Log collection
B) Threat detection
C) Incident response
D) All of the above