fact, fiction, nonetheless...

From: sween (sweenat_private)
Date: Thu Aug 09 2001 - 18:17:46 PDT

Next message: tcleary2at_private: "Re: [Fwd: Logfiles]"

Previous message: Nate Campi: "Is this the first post?"
Next in thread: Don Tansey: "Re: fact, fiction, nonetheless..."
Reply: Don Tansey: "Re: fact, fiction, nonetheless..."
Reply: Derek.Morrisat_private: "Re: fact, fiction, nonetheless..."
Reply: H C: "Re: fact, fiction, nonetheless..."
Reply: MATIat_private: "RE: fact, fiction, nonetheless..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Is it true that, in the event of intrusion, the authorities will
confiscate the machines to apply forensics to the logs etc.?

Meaning: if I do not have a logging server available across nodes, and I
report an intrusion that causes considerable damage, the authorities will
toss my mission critical machines into a trunk and withold them evidence.

So: if I had a logging server that centralized the logs, in the event of
intrusion, the authorities would just confiscate IT... right?


How accurate is this?


--

 ---  -sween                               
| M | http://www.modelm.org                 
 ---  "force feedback computing since 1984."
<meta name="MSSmartTagsPreventParsing" content="TRUE">



---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribeat_private
For additional commands, e-mail: loganalysis-helpat_private

Next message: tcleary2at_private: "Re: [Fwd: Logfiles]"
Previous message: Nate Campi: "Is this the first post?"
Next in thread: Don Tansey: "Re: fact, fiction, nonetheless..."
Reply: Don Tansey: "Re: fact, fiction, nonetheless..."
Reply: Derek.Morrisat_private: "Re: fact, fiction, nonetheless..."
Reply: H C: "Re: fact, fiction, nonetheless..."
Reply: MATIat_private: "RE: fact, fiction, nonetheless..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Aug 09 2001 - 21:49:05 PDT