A chronological record of system activities that provides documentary evidence of the sequence of events, used for security monitoring, compliance, and forensic investigation.