Alejandro has noticed that a standard system file is missing. What utility can he use to help determine who deleted the file?

Domain 6: Security Assessment and Testing Practice Questions
Questions from the following topics are included in this domain: 
Designing and validating assessments and tests
Conducting security control testing
Collecting security process data
Analyzing test output data and generating reports 
Conducting and facilitating security audits