Question

Locked

Is it possible to trace the origin of a google doc from a shared gdrive?

By Matpat22222 ·
So at the place that I work, we have a shared google drive account between about 200 or so other people. Its basically just to have a place where we can all store any files that we may feel can help out the rest of our colleages such as pdfs and spreadsheets. A couple of weeks ago it was brought to the attention of the boss that there had been a google doc created that contained some very sensitive info on it and a full out manhunt was made for the IT guys to find out who created the google doc on this shared gmail account. My question is if it is even possible for them to track down who this person(s) is? Keep in mind everyone here uses their own personal laptop connected to the company network which we had to register our laptops on.

This conversation is currently closed to new comments.

2 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Couple of thoughts

by robo_dev In reply to Is it possible to trace t ...

Do you know the file creation/upload date/time?
Got firewall logs?
Got a badge entry system with logs?
What file format? Have you looked at the word or pdf metadata in the file?

If you can get to the registry of the suspect machine, the evidence would be in there.

Google Drive Forensics
http://www.sysforensics.org/2012/05/google-drive-forensics-notes.html

Back to Hardware Forum
2 total posts (Page 1 of 1)  

Related Discussions

Related Forums