Forensic Tracking program available when no logging is set on the server

Netexperts
Netexperts used Ask the Experts™
on
I know this is a long shot but is there any programs out there that we can run on a server or PC that will give us any forensic data about data transfer, browsing etc even though no logging or auditing has been enabled on the server itself.
We have a client that suspects an ex employee has stolen some information and wondered if there's a program out there that we can simply run that will give us an overview if possible ?
Thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
As you've already mentioned, retrospectively trying to gather this data when it wasn't being collected during the event is a difficult task at best.

While I can not recommend any software, I can suggest a couple of things, such as searching for files that were accessed or modified recently, making copies of the temporary internet files locatations and (this should be done first) using file recovery software to identify recently deleted files (in case it is suspected that the user either maliciously removed data, or may have deleted filed to cover their tracks).

Author

Commented:
Thanks,

I didn't think it would be easy but that's enough to go on.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial