Forensic Soundness of Log Data
At Assuria, we provide Protective Monitoring solutions to major government and commercial organisations worldwide and we firmly believe that such monitoring systems must use forensically sound (i.e. evidential quality) log and activity data if they are to provide meaningful and defensible protection. In fact, why would any organisation that's serious about this, even bother analysing and reporting on system activity if the integrity of the data could be questioned? A 'Chain of Custody' that proves that log data are complete, original and unchanged is essential!
This free Assuria White Paper discusses the term 'Forensic Soundness', its implications for log collection, management and analysis, and discusses relevant product features in Assuria Log Manager as an illustration.