Not All Comms Data Is Equal
Email is different from telephones
We don’t allow “trunk taps”
Web/URL different from call info
IP # of both parties
Reverse lookup easier...
Time
‘Machine fingerprint’ from plugins?
URL carries user/session data after the ‘?’
The full session
Previous slide
Next slide
Back to first slide
View graphic version