Windows Security Logging and Other Esoterica

thoughts from the Windows auditing team

*Not* generating logs is not an option... when you're under subpoena

*Not* generating logs is not an option... when you're under subpoena

  • Comments 1

Working as I do for a company that exists because of copyright, I'm not particularly sympathetic to TorrentSpy, a search engine company that is accused by the Motion Picture Association of America (MPAA) of helping to enable copyright infringement by making it easier to find content on the BitTorrent file sharing network.

How does this pertain to logging?  Well, TorrentSpy doesn't do any.  Or at least they didn't used to.  So when they received a court order demanding logs, they said "sorry, no can do". However the judge ruled that since the server's memory temporarily contained information like the search terms that were requested and the IP address that was the source of the request, and that even though that was only temporarily in RAM, that it was still "stored information", so turn it over.  In other words, TorrentSpy had better produce some logs, and soon.  Initially the court will allow masking of IP address information before the logs are turned over to the MPAA

Comments
Page 1 of 1 (1 items)
Leave a Comment
  • Please add 8 and 3 and type the answer here:
  • Post