A security analyst is reviewing computer logs because a host was compromised by malware. After the
computer was infected it displayed an error screen and shut down. Which of the following should the analyst
review first to determine more information?


A. Dump file
B. System log
C. Web application log
D. Security log