Sam is a cybersecurity analyst who works in a security operations center (SOC) at Rogers Enterprises. Part of his duties involves implementing attack frameworks to better understand how adversarial behaviors operate before, during, and after cyber attacks. Which of the following is the correct order of attack phases in the Lockheed Martin Cyber Kill Chain he should use when analyzing a threat?