<div>
<div class="content wysiwyg-content">
A suspicious employee went back to a building and took paper files and probably data from a pc and then changed the password on the pc. <br />
<br />
I can crack the pc password but is there a way to see what activity there was? What files were copied to usb sticks for example? <br />
<br />
Thanks
</div>
</div>


A suspicious employee went back to a building and took paper files and probably data from a pc and then changed the password on the pc. 

I can crack the pc password but is there a way to see what activity there was? What files were copied to usb sticks for example? 

Thanks

Activity history for windows 7 on a particular day?

Disaster Recovery is the planning for and creation of policies and procedures related to the resumption or continuation of an organization's functions following a catastrophic event. The term is most frequently used in relation to failure of networks, but DR preparations also include other business systems and personnel considerations.