Which is the most defensible statement to include in a written network-forensics report?