Isaac is performing a forensic analysis on two systems that were compromised in the same event in the same facility. As he performs his analysis, he notices that the event appears to have happened almost exactly one hour earlier on one system than the other. What is the most likely issue he has encountered?

The attacker took an hour to get to the second system.

One system is set to an incorrect time zone.

The attacker changed the system clock to throw off forensic practitioners.

The forensic tool is reading the timestamps incorrectly.