Q3
Single choice
A company'sSIEMis designed to associate the company'sasset inventorywith user events.
Given the following report:

Which of the following should asecurity engineer investigate firstas part of alog audit?