What is the act of altering logs to evade legal action?

• A. Auditpol
• B. Manipulating Logs
• C. Clearing Logs
• D. Covering Tracks on the Network

Answer: (B)

Tampering with log data is about changing entries to mislead investigators and avoid accountability. When someone edits, backdates, or inserts false events into logs, they are manipulating logs to cover their tracks and evade legal action. This term directly captures the act of altering the record itself, which is why it’s the best fit for the scenario. In practice, defenders emphasize log integrity through tamper-evident storage and integrity checks to prevent and detect such manipulation. Configuring auditing policies isn’t about altering logs, clearing logs means deleting them, and covering tracks on the network is a broader tactic that includes more than just changing log entries.