Security/ CSI work....looking for end user recent activity

[Larommi]

whatever came of this?

[Muppet]

whatever came of this?

I was able to determine he sent the pic to the printer and HR confronted him. He confessed and was fired. We got his login and found nothing on any of the PCs he had logged into in the past month. At the time, we were mid-migration to Win7 so, some things were unsecured.