 Server 2003 added some API calls so that applications could register with the security event logs and write security audit entries.Specifically, the AuthzInstallSecurityEventSource function installs the specified source as a security event source.The EventTracker newsletter states that "The possibility of tampering is not enough to cause the logs to be inadmissible, there must be specific evidence of tampering in order for the logs to be considered inadmissible".