The processor 154 then analyzes the decrypted logfile 166 at step 320 to determine whether the logfile 166 is valid, for example, by looking at the filename, the latest date in the logfile or analyzing other data unique to the file such as the version number or symbol to determine whether the logfile 166 has been tampered with.