Back to list
Jul 18 2007 02:58PM
jexmann hotmail com
RE: file logging
Jul 20 2007 12:38AM
Howe, Paul H (paul howe nwa com)
Or e-mailed them, or scanned them on the copier that scans to PDF e-mail
-> his hot mail account.
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of jexmann (at) hotmail (dot) com [email concealed]
Sent: Wednesday, July 18, 2007 9:58 AM
To: forensics (at) securityfocus (dot) com [email concealed]
Subject: file logging
I have object access auditing turn on, on the windows 2003 file server,
but a common question that comes up when some one has left the firm, is,
"what did he take with him?"
so my question is, how can i determine if the client copied files from
the network to his pc, and secondly did the client copy files from the
network or pc to a usb stick, or burn them to a cd-rom?
[ reply ]
Copyright 2010, SecurityFocus