The only 2 papers I have come across that deal specifically with Windows 2000 are: "Computer Forensics: Introduction to Incident Response and Investigation of Windows NT/2000" Norman Haase http:/rr.sans.org/index.php Requires free account registration "Initial Response to Windows NT/2000" Kevin Mandia http://www.foundstone.com/pdf/ir-primer.pdf Christine Siedsma Program Manager Computer Forensic R&D Center Utica College of Syracuse University Utica, New York 315-792-3708 ----- Original Message ----- From: "rjohnst" <bob@private> To: <crime@private> Sent: Wednesday, September 04, 2002 12:45 PM Subject: CRIME Windows 2000 auditing... > Hello all! > > I have a client that is using Windows 2000. She wants procedures to > audit the user's PCs to see what they have been up to. I was hoping to > find a paper that has already been done, so I don't have to recreate the > wheel. > > Thanks in advance, > > > Robert Johnston > Datajockeys, LLC > Hillsboro, OR >
This archive was generated by hypermail 2b30 : Wed Sep 04 2002 - 13:31:42 PDT