Results 1 to 3 of 3

Thread: is it possible to find usb file copy logs in windows 7? Share/Save - My123World.Com!

  1. #1

    is it possible to find usb file copy logs in windows 7?

    Hi Friends,
    we had a scenario,in my friends company an employee(who is in high position) has copied some highly classified
    files when leaving the company,we are trying to find some evidence for it.
    so far we have tried this beautiful tool called USBDeview and we can see the usb device insertion history in the device.
    but we are looking for file copy logs by the user.

    the guy is not a techie and so we are thinking that the evidence might be still there in the machine.
    the machine is a windows 7 laptop.they had an AV installed in it,but at the time of incident its license were expired and after that it was renewed.
    AV used was quick heal.the machine was not formatted ,the machine is currently with us.
    so we probably know when the incident has happened. we are looking for file copy logs to the usb on that specific time.


    can some experienced white hat hackers guide me or give me some tips about how i can get those VITAL USB FILE COPY LOGS ?

  2. #2
    ... I am no Expert b0nd.g4h@gmail.com b0nd's Avatar
    Join Date
    Jul 2010
    Location
    irc.freenode.net #g4h
    Posts
    744
    Hi,
    As far as I know, if you guys are planning to take a legal action if evidences are found, stop messing up with the machine. Get some legal forensic guys in and rest they will handle.
    Generally a clone of the suspected machine is made and then it is left untouched. All is done on the clone image.

    Cheers!
    [*] To follow the path: look to the master, follow the master, walk with the master, see through the master,
    ------> become the master!!! <------
    [*] Everyone has a will to WIN but very few have the will to prepare to WIN
    [*] Invest yourself in everything you do, there's fun in being serious

  3. #3
    Company is in Chennai India but the client belongs to overseas. They are very much concerned about finding evidence . We are not sure about the Indian police in this field. Can you point to some legit companies who can get it done ?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •