CompTIA SecurityX (CAS-005) CAS-005 — Question 270

A company finds logs with modified time stamps when compared to other systems. The security team decides to improve logging and auditing for incident response. Which of the following should the team do to best accomplish this goal?