Which of the following is not a good response to a detected intrusion?

A.
Collect additional information about the suspected attack

B.
Inject TCP reset packets into the attacker’s connection to the victim system

C.
Reconfigure routers and firewalls to block packets from the attacker’s apparent connection

D.
Launch attacks or attempt to actively gain information about the attacker’s host