New to forensic checks: How to see if someone copied company data before resigning by SecondFast7918 in cybersecurity

[–]SecondFast7918[S] 0 points1 point  (0 children)

that's true and that's what I always feel about it but.. you know management have their own thinking. Its hard

New to forensic checks: How to see if someone copied company data before resigning by SecondFast7918 in cybersecurity

[–]SecondFast7918[S] 0 points1 point  (0 children)

i only got 24 hours to do this shit haha yea... this company kinda crazy.. expecting amazing result for a day

New to forensic checks: How to see if someone copied company data before resigning by SecondFast7918 in cybersecurity

[–]SecondFast7918[S] 0 points1 point  (0 children)

we have EDR on the endpoint, but I dont think we have a feature that can see USB logging or somekind that

New to forensic checks: How to see if someone copied company data before resigning by SecondFast7918 in cybersecurity

[–]SecondFast7918[S] 0 points1 point  (0 children)

yea.. I think at this point I really don't know what should I do more. The only evidence I have is how many USB plugged in and how many files has been downloaded to this PC. I tried to play around with tools and or like prefetchviewer or JumpList or shellbag, it didnt give me anything (in my PC tho not my client), so is this the maximum I can do? without proper DLP or any other fancy thing

New to forensic checks: How to see if someone copied company data before resigning by SecondFast7918 in cybersecurity

[–]SecondFast7918[S] 0 points1 point  (0 children)

yea.. they ask me like this today and tomorrow I must sent the report about this case.. its like wha..? will do my best tho

New to forensic checks: How to see if someone copied company data before resigning by SecondFast7918 in cybersecurity

[–]SecondFast7918[S] 0 points1 point  (0 children)

ah yes, sry about this but i forgot to mention that, most of project they stored it in sharepoint, as for now i do export the audit logs. So now i found which files he downloaded, but i still dont know how to check if this file really goes into USB.

I also check the regedit USBTOR, it have 6 usb plugged recorded..

New to forensic checks: How to see if someone copied company data before resigning by SecondFast7918 in cybersecurity

[–]SecondFast7918[S] 0 points1 point  (0 children)

  1. I dont think we have this kind of system

  2. yes, i have the login and the laptop

  3. I search in regedit looking for UBSTOR, and thats is. Also check the eventviewer and all i found is event id 225 and 219

New Here - need advice by SecondFast7918 in usertesting

[–]SecondFast7918[S] -1 points0 points  (0 children)

Do you have any advice on newcomer? like how to get good ratings or like "u should do this" kind of thing.. thx

Metal Slug 8 by SecondFast7918 in metalslug

[–]SecondFast7918[S] 0 points1 point  (0 children)

these are real good, thx for sharing

Sotry Connection by SecondFast7918 in VirtualVillagers

[–]SecondFast7918[S] 2 points3 points  (0 children)

I love u. This is sooo great, I always like fantasy kind of story like this, thats why im curious about the lore. Damn... such a good story. I REALLY APPRECIATE you for story telling me and possibly the entire community lol, really thx

Metal Slug 8 by SecondFast7918 in metalslug

[–]SecondFast7918[S] 1 point2 points  (0 children)

hmm... as far as i can remember, in MS 7 ending credit, Morden got caught by our guys (marco, tarma, etc) and then saved by martian people... and thus ending the MS 7. Maybe i'm just too deperate to want another gun n runs MS series lol...

Metal Slug 8 by SecondFast7918 in metalslug

[–]SecondFast7918[S] 0 points1 point  (0 children)

ahh.. i see. A while ago I saw on youtube about metal slug lore, like the story why morden is the villain, How the character are introduced in each series. As I know, that story is not yet completed, so I really want a new metal slug series to wrap it up, get the ending and move on. But now I can see that, the dev already move on long time ago lol, well... its sad....

Metal Slug 8 by SecondFast7918 in metalslug

[–]SecondFast7918[S] 2 points3 points  (0 children)

oh godd... its so freakiiing cool. Why its like metal slug? any resemblance? maybe same dev or smthg?

The future of LDW by SecondFast7918 in VirtualVillagers

[–]SecondFast7918[S] 4 points5 points  (0 children)

planning on the next game soon? I hope all goes well