The progress of future e-business and e- commerce will depend on the ability of our legal institutions to protect general users from cyber crimes. While there has been substantial progress in the development and implementation of tools for detecting and preventing cyber attacks, there is a lack of effective methodologies to prosecute the perpetrators of cyber crimes (cyber criminals). Consequently, many cyber crimes go unpunished and many intrusion detections tools go unutilized. Hence there is a need for holistic methodologies that can help organizations collect legally valid evidences from cyber crimes so that appropriate actions can be taken against cyber criminals. This paper presents an approach for this objective by using honeynets.