When using logging to maintain server security, which is the key element for intrusion detection and should be contained the server logs?

A.
Vulnerability scan that identifies susceptible services that are active on the server.

B.
Results of penetration testing through uncover problem probable weaknesses.

C.
An entry for each application transaction with details of the organization.

D.
Alerts to suspicious activities that require further investigation.