RE: [Full-Disclosure] write events log to CD?

[Pikett/LKSI <lksi.pikett@xxxxxx>]

>Is there a way to setup Event Log in Windows to log to a CD-R by maybe
using
>software like Aptec DirectCD so that intruders could not erase their tracks
>?

am i wrong or can the data in one session be made inaccessible by writing a
new session on the cd-r without importing the toc of the former one? and
what about filling up the cd-r with nonsense before doing the real evil
stuff? that might be a problem in a syslog environment too...but there you
could fire an alarm as soon as the rate of messages goes beyond a certain
level or type.

my 2 ct.

regards
Sascha Mettler




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html