Re: Reacting to a server compromise

["James A. Cox" <computer () jacox net>]

I've never heard of a rule that prohibits the introduction in evidence 
of Norton Ghost images or any other electronic evidence.  In most places 
in the US, I think, there wouldn't be any hard and fast rules; it would 
be up to the judge to decide whether the evidence was reliable enough.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html