A recent intrusion has resulted in the need to perform incident response procedures. The incident response team has identified audit logs throughout the network...