The log an attacker can edit

• A

  Making the log file append-only on the same host

• B

  Shipping log entries to a separate system the compromised host cannot modify

• C

  Encrypting the log file

• D

  Rotating the log file frequently so that the older entries are archived away