What action involves manipulating or erasing logs to cover up unauthorized access?

What action involves manipulating or erasing logs to cover up unauthorized access?

• A. Covering Tracks
• B. Gaining Access
• C. Executing Applications
• D. Vulnerability Analysis

Answer: (A)

Manipulating or erasing logs to cover unauthorized access is about anti-forensics—the act of hiding what happened by altering audit trails. After breaking in, an attacker may clear, modify, or forge log entries, tamper with timestamps, or wipe security logs to prevent investigators from reconstructing the sequence of events or identifying the attacker. This behavior is exactly what “covering tracks” describes, making it the best answer because it directly involves evading detection by tampering with evidence. Gaining access describes the intrusion itself, not the attempt to conceal it. Executing applications refers to running programs after gaining access, which is a step in the attack but not about hiding traces. Vulnerability analysis is about finding weaknesses in the system, not about hiding evidence of an intrusion.

Manipulating or erasing logs to cover unauthorized access is about anti-forensics—the act of hiding what happened by altering audit trails. After breaking in, an attacker may clear, modify, or forge log entries, tamper with timestamps, or wipe security logs to prevent investigators from reconstructing the sequence of events or identifying the attacker. This behavior is exactly what “covering tracks” describes, making it the best answer because it directly involves evading detection by tampering with evidence.

Gaining access describes the intrusion itself, not the attempt to conceal it. Executing applications refers to running programs after gaining access, which is a step in the attack but not about hiding traces. Vulnerability analysis is about finding weaknesses in the system, not about hiding evidence of an intrusion.