What is a difference between tampered and untampered disk images?

Refer to the exhibit.

What is occurring in this network?

Refer to the exhibit.

In which Linux log file is this output found?

Which utility blocks a host portscan?

A company receptionist received a threatening call referencing stealing assets and did not take any action assuming it was a social engineering attempt. Within 48 hours, multiple assets were breached, affecting the confidentiality of sensitive information. What is the threat actor in this incident?