Any pointers to recommended reading regarding state or federal laws that stipulate how evidence must be handled to hold water in court? Thanks. -chris >You still have to be able to attest to the integrity of the >information >collected.. other requirements would be proper timestamping, hashing, >encryption of the data. Otherwise, you'd better have a hidden camera >with the correct date/time on display pointed at the suspect's >keyboard >and face that you can correlate with the keylogger or sniffer output >or whatever.. Corroborating physical evidence is the key when doing >covert investigations.. _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Fri Jun 29 2001 - 11:07:46 PDT