the log captures activities across three days there are several intrusion attempts