During the analysis phase of an incident, an analyst is tasked with determining the scope of a suspected breach on several servers. Which data source will MOST likely provide the comprehensive information required to assess the activities on the affected servers?
Firewall logs
Operating system-specific security logs
Packet captures
Vulnerability scans