Security Basics mailing list archives

Re: Forensic Tool


From: "Shreyas Zare" <shreyas () technitium com>
Date: Mon, 9 Jun 2008 23:12:43 +0530

Hi,

Firstly, you have not clearly explained what has happened. Secondly,
after someone does something like copy file into media before
deletion, it is difficult (or impossible) to find it out. You need to
have some mechanism in place to log such things before hand. Also
provide details like what OS is in the scenario.

Regards,

On Mon, Jun 9, 2008 at 10:26 PM, <newnewguy () aol com> wrote:

Hi,


I of the person in my company has downloaded very imp files (Application & Data)from HR portal.


He has deleted the files from his machine. We need to ensure that files were not copied to any other media before 
deletion.


Request you to please help on How this can be achieved.


Thanks!


New Guy



--
("There are only 10 kinds of people in this world: those who know
binary and those who don't.")

Shreyas Zare
Co-Founder, Technitium
eMail: shreyas () technitium com

..::< The Technitium Team >::..
Visit us at www.technitium.com
Contact us at theteam () technitium com

Technitium Personal Computers
We believe in quality.
Visit http://pc.technitium.com for details.


Current thread: