During an ongoing investigation of a security breach, it is determined that sensitive customer data has been illegally accessed and exfiltrated by an external party. As part of the incident response team, you are tasked with the responsibility of communicating with law enforcement. What information should you prioritize in your initial report to the authorities to aid their investigation effectively?
An executive summary of the incident, highlighting who, what, when, where, and why details
A detailed compilation of evidence such as logs and disk images
Metrics such as mean time to detect and respond to the incident
A comprehensive root cause analysis outlining potential internal faults