troubleshooting Question

Client Security Risk - Logs of users activies? Logs of deleted files? Recover?

Avatar of Jason Kidman
Jason KidmanFlag for United States of America asked on
SecurityWindows XPDisaster RecoveryDigital Forensics
11 Comments5 Solutions708 ViewsLast Modified:
I have a client - has 1 PC but its very critical to a community of high end homes

Client has an admin account in Windows XP and has sensitive data on it

When manager is not there, the employee (24/7 staffed)  will use a limited user XP account


We have reason to believe the system was compromised. Client fired an employee that has some potential hacking capability.

A folder of sensitive data was found copied to a different location that the limited account could access.

1) The Administrator "Back Door" account has been possibly reset. I want to know if there is a log of when/if the Back Door account password was changed??

2) The folder that was copied shows a date with a timestamp of 2009. I want to know if theres a way to verify if that time stamp is accurate. For example, the hacker could just reset windows time to that date, create the folder, then copy the files over and it would keep that time stamp.

3) Is there any 3rd party companies that the hard drive could be sent too, that charge a fee, to see if files have been deleted or modified? For example there is a copy of an XLS file that may have goes to a certain date in 2009. We want to know if the information after that was deleted, or if it was actually copied in 2009.

Any help would be appreciated I know this is a pretty random thing, but it is critically important.
ASKER CERTIFIED SOLUTION
SirtenKen

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 5 Answers and 11 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 5 Answers and 11 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros