The application must record a time stamp indicating when the event occurred.

It is important to include the time stamps for when an event occurred. Failure to include time stamps in the event logs is detrimental to forensic analysis.

Review the application logs.

If the time the event occurred is not included as part of the event, this is a finding.

Configure the application to record the time the event occurred when recording the event.