If you have software like arcserve 2k exchange agents you could backup their mailbox's every hour or half hour. That will save their sent and received mail. You could also enable mail tracking. -----Original Message----- From: David Walker [mailto:david.walker@rosebank-house.co.uk] Sent: Thursday, May 16, 2002 3:46 PM To: forensicsat_private Subject: Tools and Tips - Exchange Does anyone know of the existence of neat tools for the examination of large MS Exchange installations. Or have you any good techniques for securing evidence of the activities of a few people when it is not possible to take the system away for examination. Dave Walker -- David Walker E-mail: david.walker@rosebank-house.co.uk ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Fri May 17 2002 - 08:30:54 PDT