Accounts and protecting information
Records of activity, such as when someone signed in or what a system did. Investigators use them to understand an incident.