Is the logs collected by winlogbeat legally valid as an evidence in court?

Elastic Stack Beats
1

Hi,

I have a query related to legal purpose.

I am using winlogbeat to ship windows event logs to the elasticsearch. And winlogbeat process the logs and add extra fields to it and store it as docs in an index.

So, If I have a requirement to submit the RAW logs to an US court for investigation and forensics, can I submit these logs from the elasticsearch indices as an evidence?

If NO, what's the solution?

2

Shouldnt the court provide the definition of RAW log?

or at least the lawyers argue about it.

3

Is there any standard recommendations or format in that case?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.