Forensics
file logging Jul 18 2007 02:58PM
jexmann hotmail com
I have object access auditing turn on, on the windows 2003 file server, but a common question that comes up when some one has left the firm, is, "what did he take with him?"

so my question is, how can i determine if the client copied files from the network to his pc, and secondly did the client copy files from the network or pc to a usb stick, or burn them to a cd-rom?

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus