Networks

Ask something
Question Locked

Computer Forensics 101

0 helpful
6 replies

by thumper1

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

As a Network administrator, I need some basic knowledge on this subject. I have some secretaries and a few Attorneys who treat their company owned computers as their personal amusement parks. I need to be able to find out where these people go and what they do on the Internet. What is the best way to educate myself?
Thanks

6 replies

by oh smeg

Generally works.

Though I'm not sure that is what you are asking here.

Col

by thumper1

I guess I should have clarified this. The problem people, while quite a ways from being computer literate, are very careful to hide their tracks. They set their browsers to keep no history. They have been real good at deleting all content, including off line and cookies.
We have a computer use policy that is being reviewed and re-written.
I have been told that everything they do is stored in a file called index.dat. I am not sure if history information is stored anywhere else, I have downloaded a couple of programs to read this file, so far with mixed results. What I am asking is if there is anything else I could be doing to try to get a handle on what's going on.
Thanks

by xnavydk

just get a web blocker like web sense to block unwanted content. As well as get your network use policy in place. really no need to be big brother if you are proactive rather than reactive. although, If they are a remote user you cant use a blocker service if they are wireless or use the laptop at home, get your group policy object for company laptops in place by restricting advance functions in the browser. like the ability to delete cookies, and history. Make sure you have your consent to monitoring policy in place as well.

by cmiller5400

Be careful; know your laws in your area about employee monitoring.

If your organization doesn't have an IT Policy, then it may be time to draft one that covers "acceptable use"

This discussion is closed to new replies.