Where can an incident responder find the exact location of the file copy created by the Protect:

Where can an incident responder find the exact location of the file copy created by the

Protect: Copy File response action?

A.
in the Incident Snapshot

B.
in the Marker File

C.
in the System Event

D.
in the Discover Target configuration