> Sending logs off as they're written to a centralized logging server or a time-series database would have been useful in this context. Schneier & Kelsey's pap

> Sending logs off as they're written to a centralized logging server or a time-series database would have been useful in this context. Schneier & Kelsey's paper Secure Audit Logs to Support Computer Forensics[1] seems relevant here. At the time I know that they wished to patent the work; does anyone know if a patent were granted, and if so when it expires? [1] https://www.schneier.com/cryptography/paperfiles/paper-auditlogs.pdf https://www.schneier.com/cryptography/paperfiles/paper-audit...