A network administrator is unable to identify the root cause of a network incident because insufficient evidence about the threat actor's actions was logged. Th...