HotLavaJavas
New Member
- Joined
- Sep 13, 2011
- Messages
- 130
- Reaction score
- 0
Just want to observe that in some of my investigations I have have been challenged on the reliability of time stamps. I'm not an expert in this area but I understand it could have to do with different time zones, websites that go down, site administrators that change things, and a whole host of other things.
Just imo from experience
I can see the point. In my current occupation, I deal with SOX compliance, which requires to to pinpoint which login was used, from which machine, and at what time. When we provide how many login credentials are presently set up for a specific app to our auditors, we provide before and after data for specific time frames. They require screenshots of the login roster itself, and the ticket IDs for adding and removing individuals. Lacking this information results in hefty fines.
Now, not every company has to follow SOX, but in their own best interest, most have security set in place, especially an ISP.
Additionally, a computer login/logoff is kept in the computer's event log, which is timestamped with the computer system's time clock. Any time it is changed, it will appear in the event log. Computers are essentially a gold mine of information.