Penetration Testing mailing list archives

Re: Boot floppy


From: Tim <tim-pentest () sentinelchicken org>
Date: Wed, 11 Apr 2007 08:00:39 -0400

Why do you think you have to go to such extremes if it is a company PC?

If he is TAKING the PC home instead of HAVING HIS PC at home all the
time next time the PC is at company - and you re authorised to perform
such a thing - take it apart...

If on the other hand you want to spy on that user and see what he is
doing with his files I suggest checking with the company's legal
department before doing anything else.

and finally sounds like a job for psexec...

I agree with these points.  Mifa, this question is probably best for the
forensics list.  The folks there are pretty experienced with this kind
of situation.  There are lots of legal issues you could find yourself in
hot water with, and you're better off asking investigators when doing an
investigation, not pentesters. (No offense intended to pentesters of
course.)

tim

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: