Full Disclosure mailing list archives
RE: Windows Time Synchronization - Best Practices
From: James Edwards <hackerwacker () cybermesa com>
Date: Wed, 20 Oct 2004 01:22:33 -0600
On Tue, 2004-10-19 at 11:22, Richard Stevens wrote:
Why FD? What is the direct security implications of this? I'm sure someone can construct a rather tenuous link, but really....
All forensics requires a time line or time reference so the separate pieces of forensic data can be assembled in the order they happened. Otherwise, each data point cannot be related to the others. Data is often gathered from multiple devices. Security and time are very much related. I would suggest NTP and using GMT. -- James H. Edwards Routing and Security Administrator At the Santa Fe Office: Internet at Cyber Mesa jamesh () cybermesa com noc () cybermesa com (505) 795-7101
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- Windows Time Synchronization - Best Practices Bernardo Santos Wernesback (Oct 19)
- Re: Windows Time Synchronization - Best Practices Gary E. Miller (Oct 19)
- <Possible follow-ups>
- RE: Windows Time Synchronization - Best Practices Richard Stevens (Oct 19)
- RE: Windows Time Synchronization - Best Practices Poof (Oct 19)
- RE: Windows Time Synchronization - Best Practices James Edwards (Oct 20)
- RE: Windows Time Synchronization - Best Practices Phillip R. Paradis (Oct 21)
- RE: Windows Time Synchronization - Best Practices Todd Towles (Oct 19)
- RE: Windows Time Synchronization - Best Practices Keith Pachulski (Oct 19)
- RE: Windows Time Synchronization - Best Practices Cushing, David (Oct 21)
- RE: Windows Time Synchronization - Best Practices Gary E. Miller (Oct 21)
- RE: Windows Time Synchronization - Best Practices Frank Knobbe (Oct 21)
- Re: Windows Time Synchronization - Best Practices Micheal Espinola Jr (Oct 22)
- Virus/Trojan trying to connect external:445 and 212.175.149.149.6667 Murat Bicer (Oct 22)
- Re: Virus/Trojan trying to connect external:445 and 212.175.149.149.6667 darren windham (Oct 22)
- Re: Windows Time Synchronization - Best Practices Gary E. Miller (Oct 24)
- RE: Windows Time Synchronization - Best Practices Gary E. Miller (Oct 21)