mailing list archives
Re: Forensic Tool
From: "Dennis Kudin" <dennis.kudin () gmail com>
Date: Tue, 10 Jun 2008 10:42:46 +0300
Well, I think you will not be able to find this out postfactum, but
for future - you can use some monitoring software like PC Acme Pro
which tracks the file operations.
Dennis Kudin, MVP | Windows Security
On Mon, Jun 9, 2008 at 7:56 PM, <newnewguy () aol com> wrote:
I of the person in my company has downloaded very imp files (Application & Data)from HR portal.
He has deleted the files from his machine. We need to ensure that files were not copied to any other media before
Request you to please help on How this can be achieved.