RE: Forensics on Word Documents (again)

From: Rowe, Eric (ericat_private)
Date: Fri Sep 14 2001 - 15:58:11 PDT

  • Next message: Rowe, Eric: "RE: Forensics on Word Documents"

    Just another thought...
    
    If the Word files were emailed at any point you should also be able to check
    the server logs and trash for file sizes - or for actual copies of the
    files.  Exchange, Mercury, and a lot of other mail servers allow you to
    recover these files even after they have been emptied from trash.  (I've
    recovered files and attachments dating back more than a year for some
    faculty members.)
    
    
    *****************************
    Eric R. Rowe - A.C.F.Sc.
    Computer Systems Coordinator
    School of Nursing - UBC
    (604) 822-7439
    *****************************
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Sun Sep 16 2001 - 23:01:05 PDT