| Author |
Message |
Marcia
Guest
|
 Posted:
Sun Jan 16, 2005 7:51 pm Post subject:
Re: Quick Forensics Help |
|
|
Sorry for the confusion...I had a tough time keeping focused on the work
issue when everyone (except my immediate boss who had me doing stuff) in
Pittsburgh is watching the Steelers game.
Even my husband said, who would call during a Steeler game. Merv is right,
Pittsburgh comes to a stop when they play.
Marcia
"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in message
news:%23anaCW3%23EHA.3416@TK2MSFTNGP09.phx.gbl...
| Quote: | Hi Marcia,
What on earth are you talking about? When I turn on my tv, I get the rerun
of the news of today...
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Marcia" <mkp@1248.com> schreef in bericht
news:e32APO2%23EHA.3124@TK2MSFTNGP11.phx.gbl...
Oh...turn on your tv's, it's great. Our Ben thru an interception and
they
missed the field goal again! Thank God. Now we're in OT.....Go
Steelers!
"Marcia" <mkp@1248.com> wrote in message
news:%23KottH2%23EHA.3472@TK2MSFTNGP14.phx.gbl...
Tie game...Jets missed a field goal that would have put them
ahead....oh,
the stress,... Now we have 2 minutes to run it down for a field
goal....Can
we do it? Stay tuned..
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:eQKN491%23EHA.2104@TK2MSFTNGP14.phx.gbl...
Thanks to all that replied. After 9 minutes of play time, I'll be
heading
in. The Steelers have 9 minutes to bounce back.
Marcia
"Wes" <weskjc@online.ntlworld.com> wrote in message
news:OqdR0t1%23EHA.612@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
If you are only concerned with two individuals you could redirect
all
email
sent to each user to yourself or another mailbox.
Open the User account in the Active Directory Users and Computers
console
and use the Delivery Options under Exchange General tab to Forward
all
email
to another email address as well as the original users. They will
not
know
that they email is being read. I would check that you have
policies
in
place that make it clear that employee emails are subject to
monitoring
before you start.
Kind regards,
Wes
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've been asked to
look
into
email messages between people within the office. I've logged
into
their
email using owa, and see nothing. I do see thru Message
Tracking
in
Exchange were msgs were sent between them. The client machines
showed
nothing, so obviously they cleaned up their email. Is there
away
thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
 |
Merv Porter [SBS-MVP]
Guest
|
| Posted:
Mon Jan 17, 2005 12:18 am Post subject:
Re: Quick Forensics Help |
|
|
I rest my case. :-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:OVH4uFA$EHA.2552@TK2MSFTNGP09.phx.gbl...
| Quote: | Fanatical? All I can say is......you won't see anything at the super bowl
except for the "Pittsburgh Steel Curtain"--otherwise known as our defense.
We did win in OT by 3 points. It wasn't pretty, but we won. Next
weekend,
assuming we will win, sends us off to the Super Bowl. Yes, Pittsburgh
comes
to a screatching halt. Everyone wore black and gold both Friday and
Saturday.
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:Okg9fu3%23EHA.612@TK2MSFTNGP09.phx.gbl...
Apparently you haven't run into anyone who comes from (or lives near)
Pittsburgh, Marina. They don't make much steel there anymore, so they
tend
to fixate on their professional football team (the Pittsburgh Steelers).
I
think the whole city (possibly the entire state) comes to a screaching
halt
when there's a game on the tube. To say the least, they're a bit
fanatical. :-)
--
Merv Porter [SBS MVP]
===================================
"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
message
news:%23anaCW3%23EHA.3416@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
What on earth are you talking about? When I turn on my tv, I get the
rerun
of the news of today...
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Marcia" <mkp@1248.com> schreef in bericht
news:e32APO2%23EHA.3124@TK2MSFTNGP11.phx.gbl...
Oh...turn on your tv's, it's great. Our Ben thru an interception
and
they
missed the field goal again! Thank God. Now we're in OT.....Go
Steelers!
"Marcia" <mkp@1248.com> wrote in message
news:%23KottH2%23EHA.3472@TK2MSFTNGP14.phx.gbl...
Tie game...Jets missed a field goal that would have put them
ahead....oh,
the stress,... Now we have 2 minutes to run it down for a field
goal....Can
we do it? Stay tuned..
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:eQKN491%23EHA.2104@TK2MSFTNGP14.phx.gbl...
Thanks to all that replied. After 9 minutes of play time, I'll
be
heading
in. The Steelers have 9 minutes to bounce back.
Marcia
"Wes" <weskjc@online.ntlworld.com> wrote in message
news:OqdR0t1%23EHA.612@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
If you are only concerned with two individuals you could
redirect
all
email
sent to each user to yourself or another mailbox.
Open the User account in the Active Directory Users and
Computers
console
and use the Delivery Options under Exchange General tab to
Forward
all
email
to another email address as well as the original users. They
will
not
know
that they email is being read. I would check that you have
policies
in
place that make it clear that employee emails are subject to
monitoring
before you start.
Kind regards,
Wes
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've been
asked
to
look
into
email messages between people within the office. I've
logged
into
their
email using owa, and see nothing. I do see thru Message
Tracking
in
Exchange were msgs were sent between them. The client
machines
showed
nothing, so obviously they cleaned up their email. Is there
away
thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
|
Marcia
Guest
|
| Posted:
Mon Jan 17, 2005 12:18 am Post subject:
Re: Quick Forensics Help |
|
|
Merv,
Are you a former Pgher?
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:%23RggtZA$EHA.1264@TK2MSFTNGP12.phx.gbl...
| Quote: | I rest my case. :-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:OVH4uFA$EHA.2552@TK2MSFTNGP09.phx.gbl...
Fanatical? All I can say is......you won't see anything at the super
bowl
except for the "Pittsburgh Steel Curtain"--otherwise known as our
defense.
We did win in OT by 3 points. It wasn't pretty, but we won. Next
weekend,
assuming we will win, sends us off to the Super Bowl. Yes, Pittsburgh
comes
to a screatching halt. Everyone wore black and gold both Friday and
Saturday.
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:Okg9fu3%23EHA.612@TK2MSFTNGP09.phx.gbl...
Apparently you haven't run into anyone who comes from (or lives near)
Pittsburgh, Marina. They don't make much steel there anymore, so they
tend
to fixate on their professional football team (the Pittsburgh
Steelers).
I
think the whole city (possibly the entire state) comes to a screaching
halt
when there's a game on the tube. To say the least, they're a bit
fanatical. :-)
--
Merv Porter [SBS MVP]
===================================
"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
message
news:%23anaCW3%23EHA.3416@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
What on earth are you talking about? When I turn on my tv, I get the
rerun
of the news of today...
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Marcia" <mkp@1248.com> schreef in bericht
news:e32APO2%23EHA.3124@TK2MSFTNGP11.phx.gbl...
Oh...turn on your tv's, it's great. Our Ben thru an interception
and
they
missed the field goal again! Thank God. Now we're in OT.....Go
Steelers!
"Marcia" <mkp@1248.com> wrote in message
news:%23KottH2%23EHA.3472@TK2MSFTNGP14.phx.gbl...
Tie game...Jets missed a field goal that would have put them
ahead....oh,
the stress,... Now we have 2 minutes to run it down for a field
goal....Can
we do it? Stay tuned..
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:eQKN491%23EHA.2104@TK2MSFTNGP14.phx.gbl...
Thanks to all that replied. After 9 minutes of play time,
I'll
be
heading
in. The Steelers have 9 minutes to bounce back.
Marcia
"Wes" <weskjc@online.ntlworld.com> wrote in message
news:OqdR0t1%23EHA.612@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
If you are only concerned with two individuals you could
redirect
all
email
sent to each user to yourself or another mailbox.
Open the User account in the Active Directory Users and
Computers
console
and use the Delivery Options under Exchange General tab to
Forward
all
email
to another email address as well as the original users.
They
will
not
know
that they email is being read. I would check that you have
policies
in
place that make it clear that employee emails are subject to
monitoring
before you start.
Kind regards,
Wes
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've been
asked
to
look
into
email messages between people within the office. I've
logged
into
their
email using owa, and see nothing. I do see thru Message
Tracking
in
Exchange were msgs were sent between them. The client
machines
showed
nothing, so obviously they cleaned up their email. Is
there
away
thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
|
Merv Porter [SBS-MVP]
Guest
|
| Posted:
Mon Jan 17, 2005 12:18 am Post subject:
Re: Quick Forensics Help |
|
|
No, I had a friend who was. Ultimately, his (sports) insanity lead him back
home to that city. ;-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:e7alL4A$EHA.3124@TK2MSFTNGP11.phx.gbl...
| Quote: | Merv,
Are you a former Pgher?
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:%23RggtZA$EHA.1264@TK2MSFTNGP12.phx.gbl...
I rest my case. :-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:OVH4uFA$EHA.2552@TK2MSFTNGP09.phx.gbl...
Fanatical? All I can say is......you won't see anything at the super
bowl
except for the "Pittsburgh Steel Curtain"--otherwise known as our
defense.
We did win in OT by 3 points. It wasn't pretty, but we won. Next
weekend,
assuming we will win, sends us off to the Super Bowl. Yes, Pittsburgh
comes
to a screatching halt. Everyone wore black and gold both Friday and
Saturday.
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:Okg9fu3%23EHA.612@TK2MSFTNGP09.phx.gbl...
Apparently you haven't run into anyone who comes from (or lives
near)
Pittsburgh, Marina. They don't make much steel there anymore, so
they
tend
to fixate on their professional football team (the Pittsburgh
Steelers).
I
think the whole city (possibly the entire state) comes to a
screaching
halt
when there's a game on the tube. To say the least, they're a bit
fanatical. :-)
--
Merv Porter [SBS MVP]
===================================
"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
message
news:%23anaCW3%23EHA.3416@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
What on earth are you talking about? When I turn on my tv, I get
the
rerun
of the news of today...
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Marcia" <mkp@1248.com> schreef in bericht
news:e32APO2%23EHA.3124@TK2MSFTNGP11.phx.gbl...
Oh...turn on your tv's, it's great. Our Ben thru an
interception
and
they
missed the field goal again! Thank God. Now we're in OT.....Go
Steelers!
"Marcia" <mkp@1248.com> wrote in message
news:%23KottH2%23EHA.3472@TK2MSFTNGP14.phx.gbl...
Tie game...Jets missed a field goal that would have put them
ahead....oh,
the stress,... Now we have 2 minutes to run it down for a
field
goal....Can
we do it? Stay tuned..
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:eQKN491%23EHA.2104@TK2MSFTNGP14.phx.gbl...
Thanks to all that replied. After 9 minutes of play time,
I'll
be
heading
in. The Steelers have 9 minutes to bounce back.
Marcia
"Wes" <weskjc@online.ntlworld.com> wrote in message
news:OqdR0t1%23EHA.612@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
If you are only concerned with two individuals you could
redirect
all
email
sent to each user to yourself or another mailbox.
Open the User account in the Active Directory Users and
Computers
console
and use the Delivery Options under Exchange General tab to
Forward
all
email
to another email address as well as the original users.
They
will
not
know
that they email is being read. I would check that you
have
policies
in
place that make it clear that employee emails are subject
to
monitoring
before you start.
Kind regards,
Wes
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've been
asked
to
look
into
email messages between people within the office. I've
logged
into
their
email using owa, and see nothing. I do see thru Message
Tracking
in
Exchange were msgs were sent between them. The client
machines
showed
nothing, so obviously they cleaned up their email. Is
there
away
thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
|
Marcia
Guest
|
| Posted:
Mon Jan 17, 2005 12:18 am Post subject:
Re: Quick Forensics Help |
|
|
Pgh is a good city--the only city who can flood the entire triangle.
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:ur9Ka8A$EHA.2572@tk2msftngp13.phx.gbl...
| Quote: | No, I had a friend who was. Ultimately, his (sports) insanity lead him
back
home to that city. ;-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:e7alL4A$EHA.3124@TK2MSFTNGP11.phx.gbl...
Merv,
Are you a former Pgher?
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:%23RggtZA$EHA.1264@TK2MSFTNGP12.phx.gbl...
I rest my case. :-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:OVH4uFA$EHA.2552@TK2MSFTNGP09.phx.gbl...
Fanatical? All I can say is......you won't see anything at the
super
bowl
except for the "Pittsburgh Steel Curtain"--otherwise known as our
defense.
We did win in OT by 3 points. It wasn't pretty, but we won. Next
weekend,
assuming we will win, sends us off to the Super Bowl. Yes,
Pittsburgh
comes
to a screatching halt. Everyone wore black and gold both Friday and
Saturday.
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in
message
news:Okg9fu3%23EHA.612@TK2MSFTNGP09.phx.gbl...
Apparently you haven't run into anyone who comes from (or lives
near)
Pittsburgh, Marina. They don't make much steel there anymore, so
they
tend
to fixate on their professional football team (the Pittsburgh
Steelers).
I
think the whole city (possibly the entire state) comes to a
screaching
halt
when there's a game on the tube. To say the least, they're a bit
fanatical. :-)
--
Merv Porter [SBS MVP]
===================================
"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote
in
message
news:%23anaCW3%23EHA.3416@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
What on earth are you talking about? When I turn on my tv, I get
the
rerun
of the news of today...
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Marcia" <mkp@1248.com> schreef in bericht
news:e32APO2%23EHA.3124@TK2MSFTNGP11.phx.gbl...
Oh...turn on your tv's, it's great. Our Ben thru an
interception
and
they
missed the field goal again! Thank God. Now we're in
OT.....Go
Steelers!
"Marcia" <mkp@1248.com> wrote in message
news:%23KottH2%23EHA.3472@TK2MSFTNGP14.phx.gbl...
Tie game...Jets missed a field goal that would have put them
ahead....oh,
the stress,... Now we have 2 minutes to run it down for a
field
goal....Can
we do it? Stay tuned..
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:eQKN491%23EHA.2104@TK2MSFTNGP14.phx.gbl...
Thanks to all that replied. After 9 minutes of play time,
I'll
be
heading
in. The Steelers have 9 minutes to bounce back.
Marcia
"Wes" <weskjc@online.ntlworld.com> wrote in message
news:OqdR0t1%23EHA.612@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
If you are only concerned with two individuals you could
redirect
all
email
sent to each user to yourself or another mailbox.
Open the User account in the Active Directory Users and
Computers
console
and use the Delivery Options under Exchange General tab
to
Forward
all
email
to another email address as well as the original users.
They
will
not
know
that they email is being read. I would check that you
have
policies
in
place that make it clear that employee emails are
subject
to
monitoring
before you start.
Kind regards,
Wes
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've
been
asked
to
look
into
email messages between people within the office. I've
logged
into
their
email using owa, and see nothing. I do see thru
Message
Tracking
in
Exchange were msgs were sent between them. The client
machines
showed
nothing, so obviously they cleaned up their email. Is
there
away
thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
|
Merv Porter [SBS-MVP]
Guest
|
| Posted:
Mon Jan 17, 2005 12:18 am Post subject:
Re: Quick Forensics Help |
|
|
:-)
"Marcia" <mkp@1248.com> wrote in message
news:uzRG9rB$EHA.2192@TK2MSFTNGP14.phx.gbl...
| Quote: | Pgh is a good city--the only city who can flood the entire triangle.
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:ur9Ka8A$EHA.2572@tk2msftngp13.phx.gbl...
No, I had a friend who was. Ultimately, his (sports) insanity lead him
back
home to that city. ;-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:e7alL4A$EHA.3124@TK2MSFTNGP11.phx.gbl...
Merv,
Are you a former Pgher?
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:%23RggtZA$EHA.1264@TK2MSFTNGP12.phx.gbl...
I rest my case. :-)
--
Merv Porter [SBS MVP]
===================================
"Marcia" <mkp@1248.com> wrote in message
news:OVH4uFA$EHA.2552@TK2MSFTNGP09.phx.gbl...
Fanatical? All I can say is......you won't see anything at the
super
bowl
except for the "Pittsburgh Steel Curtain"--otherwise known as our
defense.
We did win in OT by 3 points. It wasn't pretty, but we won. Next
weekend,
assuming we will win, sends us off to the Super Bowl. Yes,
Pittsburgh
comes
to a screatching halt. Everyone wore black and gold both Friday
and
Saturday.
Marcia
"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in
message
news:Okg9fu3%23EHA.612@TK2MSFTNGP09.phx.gbl...
Apparently you haven't run into anyone who comes from (or lives
near)
Pittsburgh, Marina. They don't make much steel there anymore,
so
they
tend
to fixate on their professional football team (the Pittsburgh
Steelers).
I
think the whole city (possibly the entire state) comes to a
screaching
halt
when there's a game on the tube. To say the least, they're a
bit
fanatical. :-)
--
Merv Porter [SBS MVP]
===================================
"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com
wrote
in
message
news:%23anaCW3%23EHA.3416@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
What on earth are you talking about? When I turn on my tv, I
get
the
rerun
of the news of today...
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Marcia" <mkp@1248.com> schreef in bericht
news:e32APO2%23EHA.3124@TK2MSFTNGP11.phx.gbl...
Oh...turn on your tv's, it's great. Our Ben thru an
interception
and
they
missed the field goal again! Thank God. Now we're in
OT.....Go
Steelers!
"Marcia" <mkp@1248.com> wrote in message
news:%23KottH2%23EHA.3472@TK2MSFTNGP14.phx.gbl...
Tie game...Jets missed a field goal that would have put
them
ahead....oh,
the stress,... Now we have 2 minutes to run it down for a
field
goal....Can
we do it? Stay tuned..
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:eQKN491%23EHA.2104@TK2MSFTNGP14.phx.gbl...
Thanks to all that replied. After 9 minutes of play
time,
I'll
be
heading
in. The Steelers have 9 minutes to bounce back.
Marcia
"Wes" <weskjc@online.ntlworld.com> wrote in message
news:OqdR0t1%23EHA.612@TK2MSFTNGP09.phx.gbl...
Hi Marcia,
If you are only concerned with two individuals you
could
redirect
all
email
sent to each user to yourself or another mailbox.
Open the User account in the Active Directory Users
and
Computers
console
and use the Delivery Options under Exchange General
tab
to
Forward
all
email
to another email address as well as the original
users.
They
will
not
know
that they email is being read. I would check that you
have
policies
in
place that make it clear that employee emails are
subject
to
monitoring
before you start.
Kind regards,
Wes
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've
been
asked
to
look
into
email messages between people within the office.
I've
logged
into
their
email using owa, and see nothing. I do see thru
Message
Tracking
in
Exchange were msgs were sent between them. The
client
machines
showed
nothing, so obviously they cleaned up their email.
Is
there
away
thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
|
Susan Bradley
Guest
|
| Posted:
Mon Jan 17, 2005 1:29 pm Post subject:
Re: Quick Forensics Help |
|
|
Call a specialist. If you have not done this before you can "taint" the
evidence.
You need to do a byte by byte disk image and need something like Paraben
or Encase software to forensically examine the drive.
You can't come up to speed fast enough ...honestly.
I've purchased the Encase package and gone to training and in the
process of getting the Forensic certification.
If this goes to trial the "chain of custody" is extremely important.
Marcia wrote:
| Quote: | On the Forensics end, things was put on hold. No one is permitted to log in
Monday until the boss decides if they want to call a forensics specialist in
or purchase our own software to gather info.
I've looked at a few packages. I'd be curious if anyone has used any and to
what extent. Thanks again.
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've been asked to look into
email messages between people within the office. I've logged into their
email using owa, and see nothing. I do see thru Message Tracking in
Exchange were msgs were sent between them. The client machines showed
nothing, so obviously they cleaned up their email. Is there away thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
|
Chris Jones
Guest
|
| Posted:
Mon Jan 17, 2005 6:13 pm Post subject:
Re: Quick Forensics Help |
|
|
To log and monitor emails try GFI Mail Essentials, this is a very powerful
program and can do what you would need it to do. You will get a copy of
every incoming and outgoing email should you have it set that way.
"Susan Bradley" <sbradcpa@pacbell.net> wrote in message
news:OxM51YG$EHA.2192@TK2MSFTNGP14.phx.gbl...
| Quote: |
Call a specialist. If you have not done this before you can "taint" the
evidence.
You need to do a byte by byte disk image and need something like Paraben
or Encase software to forensically examine the drive.
You can't come up to speed fast enough ...honestly.
I've purchased the Encase package and gone to training and in the process
of getting the Forensic certification.
If this goes to trial the "chain of custody" is extremely important.
Marcia wrote:
On the Forensics end, things was put on hold. No one is permitted to log
in
Monday until the boss decides if they want to call a forensics specialist
in
or purchase our own software to gather info.
I've looked at a few packages. I'd be curious if anyone has used any and
to
what extent. Thanks again.
Marcia
"Marcia" <mkp@1248.com> wrote in message
news:%23D2S1H1%23EHA.2112@TK2MSFTNGP14.phx.gbl...
Hi! We've had an internal employee issue and I've been asked to look
into
email messages between people within the office. I've logged into their
email using owa, and see nothing. I do see thru Message Tracking in
Exchange were msgs were sent between them. The client machines showed
nothing, so obviously they cleaned up their email. Is there away thru
exchange to actually view the message?
Thanks again.
Marcia
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in