We suspect a malicous employee may have deleted some files from a network share, but we do not have proof. Is there a quick way to determine if files have been deleted? I can compare the backup logs to the present file share, but I was hoping for quicker way. Any ideas?
