Checking a PC for suspected internet abuse. 1

[Aett]

Greetings all, can anyone tell me which folders/etc to search on a PC that it's user is suspected of internet abuse?
I've gone into documents/settings and the users login in question and looked at the cookies folder, anything else?

Thank you in advance

 

[eyec]

did you check the index.dat files?

do you have any experience with using Grep?

do you have corporate authority/approval?

have you thought about hiring a forensics consultant?

 

[sleipnir214]

Have you thought about using something like Web Historian (download:

http://www.download.com/Red-Cliff-Web-Historian/3000-2653_4-10373157.html)

to analyze the cache files of the browser(s) on the system?



Want the best answers? Ask the best questions! TANSTAAFL!

 

[Aett]

Thanks sleipnir214, thats a nice little program. I built a snapshot report which simply gives the URL and access date/time.

That worked perfectly, thanks again.

 

[tfg13]

There are plenty of programs that do this sort of thing. There is also a script that a guy named Vengy wrote. I have written a FAQ that includes this script, and one to "clear" out these files:

faq779-6302