I have read from several sources that having an adequate SSH banner set may aid in prosecution of intruders in some jurisdictions. I was just wandering if there was any truth to this, and what everyone's experience with such a banner is?
If this is indeed true, what should it say? Is something like "Disconnect immediately if you are not authorized to access this server belonging to (Company) or you will be prosecuted to the fullest extent of the law." sufficient?