A security аnаlyst fоr а large financial institutiоn nоtices abnormal OS process behavior, unauthorized changes, and file system changes occurring on one of the company's servers. The analyst believes there may be a security breach.What is the BEST way to confirm the analyst's suspicions of a breach?