A client of mine is in to some not-so-fun things...
We have managed to locate the logfile where an external drive is connected to the computer. Is there anywhere logged what is copied from and to the external drive?
not likely....depending on what system you are running and/or/if auditing is running. you may also look in either the bash/ksh history file for each user if they are using these shells.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.