You are a professional Computer Hacking forensic investigator. You have been called to collect the evidences of Buffer Overflows or Cookie snooping attack. Which of the following logs will you review

Event logs record security-relevant OS events such as process crashes, privilege escalation attempts, and access violations that are direct indicators of a buffer overflow exploit being triggered.

Program logs capture application-level exceptions, crash dumps, and abnormal termination events that serve as signatures of buffer overflow conditions in specific applications.

Web server logs record HTTP request metadata and response codes but are not classified as a primary forensic source for diagnosing buffer overflow conditions or the underlying session manipulation of cookie snooping in this investigative framework.

System logs record kernel-level and OS service events including memory faults and service failures that reflect the systemic impact of a successful buffer overflow or session-level attack.