Skip to content

Glossary: Logs and Data Sources for Investigations

Integrity

Also written: file integrity, log integrity

Proof that evidence hasn't changed since it was collected, shown with hashes, central log copies, write-once storage and file integrity monitoring. Encryption protects confidentiality, not integrity.

Where the book teaches it

Related terms

HashWORM (write once, read many)File integrity monitoring (FIM)Central log collection