Activity recorded in computer

Posted on 2006-05-13
Last Modified: 2010-04-11
I am trying to find out the activity of a work computer - a previous employee came  back to the office (after being fired 3 months ago) and was at the cmputer for 1 1/2 hours. (brave girl....)

Is there anyway that I can find out what her activity was?  I know the date and time of her being there....but did she copy any files to a floppy or removable disk?

I know how to check History, cookies, etc.  but I would like to know if other activity occurred.  any help is most appreciated!!

Also, can I recover files that were deleted from the recycle bin?
Question by:SuperCPlus
    LVL 97

    Accepted Solution

    Greetings, SuperCPlus !

    Look at the Event Viewer to see what had occurred during the period of time

    To recover deleted files, use one or more these undelete utilities

    PC Inspector
    Active Undelete
    Flash Recovery
    TestDisk & utilities

    Recovery My Files
    Restorer 2000
    Easy Recovery
    Zero Assumption

    Best wishes!
    LVL 38

    Assisted Solution

    by:Rich Rumble
    Unless you had something installed to assist you with these types of things... there isn't much your likely to find. By default windows event log records only the very minimum of occurances. If she used IE to view the web you can see where she visited, but not what she typed. Your pretty much out of luck, windows doesn't log file copies, moves or even deletions by default. It can record those things, but you have to turn those settings on before anything happens. Pretty much, only errors are logged by windows.
    LVL 51

    Assisted Solution

    if you have not activated some kind access control before, ther is not much to find out
    doing some forensics just may identify deleted o changed files
    LVL 2

    Assisted Solution

    btw, to access the built-in windows event viewer:
    start menu... run...
    type "eventvwr"...

    Author Comment

    Thanks so much for your help and quick responses!  

    I was able to view the temp internet files and cookies to track some activity during that period.....and also recover some files from the recycle bin (nothing significant) - thanks War1 for your links!

    I did look at the event viewer - but no information of interest.  In the future, it would have been nice to have some activity recorded - don't know if files were transferred to a flash drive or floppy....but the answer for this particular NOT let anyone on the computers that is not an a little worry.....and time...

    Thanks again!


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Suggested Solutions

    I thought I'd write this up for anyone who has a request to create an anonymous whistle-blower-type submission form created using SharePoint 2010 (this would probably work the same for 2013). It's not 100% fool-proof but it's as close as you can get…
    Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now