Which of the following is the MOST likely reason why the incident response team is unable to identify and correlate the incident?