Re: Boot floppy

[Tim <tim-pentest@sentinelchicken.org>]

> Why do you think you have to go to such extremes if it is a company PC?
> 
> If he is TAKING the PC home instead of HAVING HIS PC at home all the
> time next time the PC is at company - and you re authorised to perform
> such a thing - take it apart...
> 
> If on the other hand you want to spy on that user and see what he is
> doing with his files I suggest checking with the company's legal
> department before doing anything else.
> 
> and finally sounds like a job for psexec...

I agree with these points.  Mifa, this question is probably best for the
forensics list.  The folks there are pretty experienced with this kind
of situation.  There are lots of legal issues you could find yourself in
hot water with, and you're better off asking investigators when doing an
investigation, not pentesters. (No offense intended to pentesters of
course.)

tim

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------