Incident responders export logs to another system. Which property is essential for usable evidence?

1. Strip all timestamps to make records anonymous by default.
2. Replace caller identities with random values on every query.
3. Allow anyone to rewrite exported evidence without traceability.
4. Preserve integrity, time context, access restrictions, and source identity.