is this possible? there is a little concern about a certain employee checking out porn at work, and i was wondering if there was any software anyone knows about that would allow me to pull up the browser history with timestamps so we can verify that it's actually him

7/19/2006 9:25:13 PM

gotta tell ya half of that sounds like ... "i have this friend, and he was wondering if you could get rid of porn history..." haha

7/19/2006 9:32:41 PM

lol, i couldn't care less about that...i would never be dumb enough to look at porn at work...this is more about retrieving the data and getting access times (to see if he was on the computer at the time), rather than deleting the information

i've found web historian (free)

http://www.download.com/Red-Cliff-Web-Historian/3000-2653_4-10373157.html

forensic toolkit ($1100 )

http://www.accessdata.com/products/

and odessa with pasco plugin (free)

http://odessa.sourceforge.net/

just curious as to whether anyone has used these

7/19/2006 9:36:59 PM

Just get a keylogger and a packet sniffer and catch them in the act.

7/19/2006 9:43:30 PM

Perhaps you could look at timestamps on the cookies?


Or look at logs on the router

[Edited on July 19, 2006 at 11:12 PM. Reason : add]

7/19/2006 11:06:28 PM

^ sounds like a winner

7/19/2006 11:18:37 PM

Im assuming you already checked the browser history?

CTRL+H

7/19/2006 11:20:20 PM

i'm sure he's done that

it must be a shared workstation if he needs to check timestamps

7/20/2006 12:01:46 AM

ethereal is all you need

[Edited on July 20, 2006 at 12:20 AM. Reason : might even get some free pr0n passes too!]

7/20/2006 12:19:19 AM

well, in case anyone cares, i used web historian (as mentioned before, it's free)...it searches your entire computer (including deleted files) or you can specify individual files, and it outputs the entire thing into an excel spreadsheet...worked pretty well, actually

7/20/2006 9:29:02 AM

and?

7/20/2006 9:58:03 AM

and...this particular employee was looking at inappropriate web sites on company computers...he was reported by another employee, as they have a rather argumentative history, and i needed some proof one way or another in order to take action...i spoke with him this afternoon and presented him with the proof and then put him on probation

i'm thinking about installing sonic firewall as i've had good experience with it...lets in sites like tdub but blocks majorly offensive sites such as porn, weaponry, etc

7/20/2006 4:13:31 PM

let the man have his porn

7/20/2006 4:35:30 PM

Can you yank the hard drive out of the machine after hours, put it in a external USB case, and go from there? You should be able to go to town on the filesystem from there, checking file timestamps on the user's cached internet files.

I've done pulled a number of drives on machines to do some form of maintenance on them. Saves a whole hell of a lot of headaches.

7/20/2006 5:47:00 PM