Comment Re:Watch the log files! (Score 1) 327
> Even if it did, which I doubt,
Why do you say that? Do you have any basis in fact?
> ...perhaps 0.0001% of Windows domain controllers would know where to look for it,
Perhaps...if by "domain controller" you mean sysadmin. But these folks can be educated, as can law enforcement, etc. I started presenting on this at GMU2005, and have published articles and blogs on it.
H. Carvey
Why do you say that? Do you have any basis in fact?
>
Perhaps...if by "domain controller" you mean sysadmin. But these folks can be educated, as can law enforcement, etc. I started presenting on this at GMU2005, and have published articles and blogs on it.
H. Carvey
"Windows Forensics and Incident Recovery"
http://windowsir.blogspot.com/
