I recently found an old external CD/DVD player with a CD in it, when I opened the CD I found it was full of images and video clips. Whereas they weren’t inappropriate per se, they were still personal and should not have been on corporate equipment. My question is, is there anyway with only the CD/DVD to determine who burnt/dragged/saved them onto the disc itself? The issue is this device was a section shared device, so technically up to 30 people had access to the device over a 2 year period.
If there is metadata or a way of determining who put the data there, how reliable is such metadata/audit data, and can it be tampered with on such media? If it makes any odds everyone’s PC at the time (which ideally I don’t want to get into a game of having to get a 3rd party in to image everyone’s machine and look for traces of the same image on everyone’s PC) were running Windows XP. There’s no guarantee though the cd/dvd burner wasn’t took offsite and used personally.