Cybercrime forensics

From ITUwiki

In addition to lawful interception and retained data capabilities described above, government officials and network operators in specific incidences require identity management capabilities that enable trusted analysis and the availability of evidence sufficient for subsequent judicial action. For example, identity management is often critical to maintaining confidence in a chain of custody and prevention of tampering. The application of accurate or even certified timestamps is often essential for maintaining necessary analytical or evidentiary needs. This requirement typically results in the imposition by national authorities of architectures, practices, and specific identity management capabilities designed to assist authorized officials or persons.