Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 22

Thread: Security/ CSI work....looking for end user recent activity

  1. #11
    Junior Member
    Join Date
    Jan 2014
    Posts
    2,149
    vCash
    0
    Points
    423,917
    Bank
    0
    Total Points
    423,917
    Donate
    Quote Originally Posted by 3fingersalute View Post
    NEAT!!

  2. #12
    Member Muppet's Avatar
    Join Date
    Jan 2014
    Posts
    96
    vCash
    2756
    Points
    179,833
    Bank
    0
    Total Points
    179,833
    Donate
    spool is empty.
    not so blue

  3. #13
    Senior Member CeeBee's Avatar
    Join Date
    Jan 2014
    Posts
    1,677
    vCash
    1792
    Points
    141,447
    Bank
    0
    Total Points
    141,447
    Donate
    Quote Originally Posted by Muppet View Post
    spool is empty.
    I would expect that. The spool files get automagically deleted when printing completes unless set not to.
    Try to use some undelete tools to recover deleted files from the date range in question and see if any matches what the user supposedly printed.

  4. #14
    Senior Member Tekboy's Avatar
    Join Date
    Jan 2014
    Posts
    323
    vCash
    500
    Points
    279,346
    Bank
    0
    Total Points
    279,346
    Donate
    The question now is, how far can biff ride the boot of an admin?

  5. #15
    Junior Member
    Join Date
    Jan 2014
    Posts
    2,149
    vCash
    0
    Points
    423,917
    Bank
    0
    Total Points
    423,917
    Donate
    whatever came of this?

  6. #16
    Senior Member Mobile PC's Avatar
    Join Date
    Jan 2014
    Location
    Cleveland, Ohio
    Posts
    526
    vCash
    501
    Points
    360,571
    Bank
    0
    Total Points
    360,571
    Donate
    biff got the boot

  7. #17
    Member Muppet's Avatar
    Join Date
    Jan 2014
    Posts
    96
    vCash
    2756
    Points
    179,833
    Bank
    0
    Total Points
    179,833
    Donate
    Quote Originally Posted by Larommi View Post
    whatever came of this?
    I was able to determine he sent the pic to the printer and HR confronted him. He confessed and was fired. We got his login and found nothing on any of the PCs he had logged into in the past month. At the time, we were mid-migration to Win7 so, some things were unsecured.
    not so blue

  8. #18
    Senior Member CeeBee's Avatar
    Join Date
    Jan 2014
    Posts
    1,677
    vCash
    1792
    Points
    141,447
    Bank
    0
    Total Points
    141,447
    Donate
    Fired for printing one document???


  9. #19
    Member Muppet's Avatar
    Join Date
    Jan 2014
    Posts
    96
    vCash
    2756
    Points
    179,833
    Bank
    0
    Total Points
    179,833
    Donate
    He printed a photo of a a supervisor who was flipping the bird (10 years ago) and replaced the picture of that supervisor in the main hallway at work. It was actually kinda funny. vandalism, but funny.
    not so blue

  10. #20
    Senior Member ilovetheusers's Avatar
    Join Date
    Apr 2014
    Posts
    441
    vCash
    500
    Points
    366,580
    Bank
    0
    Total Points
    366,580
    Donate
    Quote Originally Posted by Muppet View Post
    He printed a photo of a a supervisor who was flipping the bird (10 years ago) and replaced the picture of that supervisor in the main hallway at work. It was actually kinda funny. vandalism, but funny.
    Someone really got fired for that? No warning? Were they gunning for him anyway?

    That is really funny.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •