I have object access auditing turn on, on the windows 2003 file server, but a common question that comes up when some one has left the firm, is, "what did he take with him?"

so my question is, how can i determine if the client copied files from the network to his pc, and secondly did the client c

[ more ]  [ reply ]

Hi Fernando,

Your English is better than my Spanish... :-)

IBM redbooks might help:

http://publib-b.boulder.ibm.com/redbooks.nsf/Redbooks?SearchView&Query=(
as%2F400%20or%20os%2F400)%20and%20security&SearchMax=4999

Also, there were a few hits on google.

http://www.google.com/search?q=os%2F400+fo

[ more ]  [ reply ]

Hi, I could use some (all) help! I have to make a forensics analysis of the
AS400 login/logoff logs records. But i don't have any idea about where to
start looking! :-(

AS400 is another world! Could someone get my an idea about how to start
looking, some web links, etc?

I will be able to ask to t

[ more ]  [ reply ]

DFRWS 2007 is less than a month away and the reduced hotel rate will
be expiring on July 20 (so book your room soon!). The 7th Annual
DFRWS conference will be held in Pittsburgh, PA from August 13 to 15
and includes research papers and presentations on topics ranging from
fresh analysis tec

[ more ]  [ reply ]

Spam detection software, running on the system "mail.securityfocus.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that

[ more ]  [ reply ]

All,

I pinged the archives but didn't see a relevant thread on this...

Does anyone have any advice on decreasing the forensic imaging time for
Pointsec encrypted drives using the DOS boot disk? Currently a colleague is
getting an average of 16-hour turnarounds and I thought I'd see if there
were a

[ more ]  [ reply ]

PacSec CALL FOR PAPERS

World Security Pros To Converge on Japan

TOKYO, Japan -- To address the increasing importance of
information security in Japan, the best known figures in the
international security industry will get together with leading
Japanese researchers to share best practi

[ more ]  [ reply ]

Greetings to the list -

Lately, I've been working with a few devices that contain internal
flash memory for storage. The existing drivers for these devices do
not mount them as a drive - in some cases, they seem to use slightly
modified USB drivers specifically to keep you from accessing them as

[ more ]  [ reply ]

IT Forensics is holding two free online events for more information see
www.itforensics.org.uk

ITfoensics wrote:
>
> ITforensics is a new service site which offers a free chat service for
> both practitioners and students of digital forensics. No registration is
> required and can prove to be a

[ more ]  [ reply ]

Hi all!

Another CFP...

>Journal of Digital Forensic Practice
><http://www.tandf.co.uk/journals/titles/15567281.asp>http://www.tandf.c
o.uk/journals/titles/15567281.asp
>CALL FOR PAPERS
>
>Submission Deadline: July 31, 2007
>
>
>The Journal of Digital Forensic Practice is a knowledge resource fo

[ more ]  [ reply ]

Spam detection software, running on the system "mail.securityfocus.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that

[ more ]  [ reply ]

Heh, forgot to send this to the list.
> Also you can't forget one of the most obvious.
> SNMP Engines are easy to come by, and when you own your own domain and
> email system (perhaps hotmail allows it, I don't use it) you can
> telnet into your email system (either hotmail or your own domain) and

[ more ]  [ reply ]

I wouldn't think tape would be a good solution for production. Perhaps for archiving while handling multiple cases but production would mean that the receiving party would have to have the drive to read it. I can't see courts going that route for cost and management reasons. Tape drive cost, tape sk

[ more ]  [ reply ]