Determining if someone copied file to a: drive

From: phil_curranat_private
Date: Tue May 29 2001 - 04:37:35 PDT

  • Next message: John Mellon: "Re: computer forensics" 

    I have been tasked to determine if some has copied a file to the a: drive.
My system information is as follows:  NT Workstation, SP6a, auditing is NOT
on.

Without auditing turned on, is there a method I can use to determine if a
user copied files to the floppy drive (a:)?  I am not aware of any way to
do this.  Any help is greatly appreciated.

v/r

Phil Curran



**********************************************************************
This e-mail and any files transmitted with it may contain 
confidential information and is intended solely for use by 
the individual to whom it is addressed.  If you received
this e-mail in error, please notify the sender, do not 
disclose its contents to others and delete it from your 
system.

**********************************************************************

    This archive was generated by hypermail 2b30 : Tue May 29 2001 - 17:15:13 PDT