Tag Info

New answers tagged

2

Yes. The Windows event log (eventvwr.msc) on the local machine will show the logon in the Security log. For example, the event details might look like this: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 23/03/2015 13:08:55 Event ID: 4624 Task Category: Logon Level: Information Keywords: Audit ...


0

Very plausible. Windows stores device information from connected USB devices in the registry, this is commonly used in forensics. If you attach an iPod/iPhone, it can leave traces on the local system as well and traces of the system you connected to my be left on the device. Endpoint DLP and antivirus may also scan removable media and leave traces. If a ...


0

There are a few aspects to this. You have articulated the first, which is to ensure your documents are not tampered with. Well the social aspect of it is really simple. Work with people you can trust. If you cannot trust the administrators with your data. Then there is no point in entrusting them with anything else.


3

If you are a user of a system and other people have administrative access then, realistically there is little, if anything, that you can do to stop them gaining access to the information you process on that machine. They are likely to have the power to install software on the machine, so could (theoretically) install key loggers or other types of software ...


1

A better way to protect against cryptolocker is to set up a NAS, that will force versioning of files. With force, I mean that all Changes of files will be saved on the NAS, and the client has no way to affect this. Then you save all important data on this versioned NAS. If the cryptolocker encrypts your NAS, you simply tell the NAS to rollback the files ...


1

Since a virus infected PC has to download (encrypt) reupload the entire file, and repeat the process for every network drive, is is possible to detect this unusually high bandwidth event? Is there a way to respond to it (via QOS or something?) You're mistaken: the malware doesn't need to transfer the file. It uses asymmetrical encryption: the file is ...



Top 50 recent answers are included