mailing list archives
Re: Forensic Tool
From: "Shreyas Zare" <shreyas () technitium com>
Date: Mon, 9 Jun 2008 23:12:43 +0530
Firstly, you have not clearly explained what has happened. Secondly,
after someone does something like copy file into media before
deletion, it is difficult (or impossible) to find it out. You need to
have some mechanism in place to log such things before hand. Also
provide details like what OS is in the scenario.
On Mon, Jun 9, 2008 at 10:26 PM, <newnewguy () aol com> wrote:
I of the person in my company has downloaded very imp files (Application & Data)from HR portal.
He has deleted the files from his machine. We need to ensure that files were not copied to any other media before
Request you to please help on How this can be achieved.
("There are only 10 kinds of people in this world: those who know
binary and those who don't.")
eMail: shreyas () technitium com
..::< The Technitium Team >::..
Visit us at www.technitium.com
Contact us at theteam () technitium com
Technitium Personal Computers
We believe in quality.
Visit http://pc.technitium.com for details.