Discussion Locked

what machine web email was sent from

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have to investigate if a pc in my network was used to send an inappropriate email message. The email was sent via web email (i.e., msn, etc.) I know which machines that I should check but I don't know what to look for. any assistance would be of great help.

7 replies

by markh

If the user didn't clear Internet settings, check your history and cookies. These are in different locations depending on the OS. The history will show the sites and the cookies will show login info.
If these settings have been cleared I'm not sureyou will be able to find out.

by joseph moore

Do run a proxy server that your users go through to hit the Internet? If so, you could check the proxy logs, to see what it recorded. You will be amazed at how much data are in those logs.

by stuart_at_oz

DOes your internet gateway keep logs of all the internet requests? Ours does - nothing we do on the internet is completely private. Of course, no-one normally looks at them, but they are there, just for this sort of occasion......

Stuart

This discussion is closed to new replies.