So you'd rather we not tell you, get access to everything, and cover our tracks?... You've got to make some allowance. If everyone just did what was deemed right by you or others we wouldn't need laws. Obviously we do... So obviously there will be someone out there on a power trip to try to gain some access to your server. Obviously you'd also rather not have to do that extra work. But if you're the security consultant for that company, you should have beaten him/her to the punch. However, seeing as maybe this enthusiast will be White Hat, all you'll need to do is reload Windows and have a good firewall, and maybe scan the most recently modified folders... I highly doubt anyone could get low-level disk access to edit the dates on files and put them back in time... This is a lot of work, yes, that you could be spending taking better measures to protect your company. But I'd rather waste an hour to fix that problem than to have a company secret or company security compromised in full, or have a hole left open. Essentially, White Hats shouldn't even be able to get any unauthorized access to your server. But purely in the spirit of hope and betterment of society, I hope the White Hat culture spreads. Its sure a hell of a lot better for companies than Black Hats are.. !

Alec

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/70/11744#11744