Security Basics mailing list archives

RE: Finding person name based on personnel email account


From: "Isaac Van Name" <ivanname () southerlandsleep com>
Date: Fri, 17 Nov 2006 15:00:50 -0600

If they're using Outlook to send the emails with the Yahoo account, then I'd
check your firewall logs for outbound traffic to a Yahoo mail server.  You
could also check the logs for HTTP access to Yahoo mail, if they're using
the website, and trace the source IP.

If all that fails (which it shouldn't),
http://answers.yahoo.com/question/index?qid=20061112180603AAMDySh

That site lists a few ways in which you can try to find a person's
information tied to their Yahoo account.

Of course, if they are using the website, I'd just set up a proxy server and
deny HTTP 
requests to mail.yahoo.com (or, rather, allow the few websites you will
allow, and deny everything else).  This is what we do here... just using a
computer with mediocre hardware, Linux (no GUI), and Squid.

Hope that helps.


Isaac Van Name
Systems Administrator

"What good would you do with an ignorant employee? Ignorance is grounds for
dismissal..." - Mario Spinthiras
 
Open Source developing at its finest:
"Written in vim, W3C valid and UTF-8 encoded, for her pleasure."
 
Disclaimer:  This email is intended only to be used to feign intellectual
mastery of a subject or superhuman command of the English language, when
profanity is involved.  By reading this email, you are agreeing to cease all
correspondence with the sender upon realizing your own ignorance, and
furthermore to refrain from taking legal action against said sender when
your compounding ignorance crushes your inadequate self-esteem.  Have a nice
day.
Original> -----Original Message-----
Original> From: listbounce () securityfocus com
[mailto:listbounce () securityfocus com]
Original> On Behalf Of neil.daugherty () us army mil
Original> Sent: Thursday, November 16, 2006 11:26 PM
Original> To: security-basics () lists securityfocus com
Original> Subject: Finding person name based on personnel email account
Original> 
Original> I am trying to track down someone that is sending illegal emails
on my
Original> network using a yahoo account.
Original> 
Original> NEIL
Original> 
Original>
---------------------------------------------------------------------------
Original> This list is sponsored by: Norwich University
Original> 
Original> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
Original> The NSA has designated Norwich University a center of Academic
Original> Excellence
Original> in Information Security. Our program offers unparalleled Infosec
Original> management
Original> education and the case study affords you unmatched consulting
Original> experience.
Original> Using interactive e-Learning technology, you can earn this
esteemed
Original> degree,
Original> without disrupting your career or home life.
Original> 
Original> http://www.msia.norwich.edu/secfocus
Original>
---------------------------------------------------------------------------
Original> 



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: