+ Post New Thread
Results 1 to 9 of 9
Windows Thread, Forensic in Technical; hi , in a computer how can i document the user visited web pages? i checked the browser history while ...
  1. #1
    lionsl2005's Avatar
    Join Date
    Nov 2008
    Location
    Barnet
    Posts
    533
    Thank Post
    373
    Thanked 23 Times in 22 Posts
    Rep Power
    16

    Forensic

    hi ,
    in a computer how can i document the user visited web pages? i checked the browser history while user logged on, he visited some un authorised sites. as a local computer administrator how to document the evidence? visited time, date, site address etc, firefox doesnt seem to have property potion to see the actual visited history date and time. please help

  2. #2
    dalsoth's Avatar
    Join Date
    Sep 2008
    Location
    Cambridgeshire
    Posts
    547
    Thank Post
    190
    Thanked 108 Times in 80 Posts
    Rep Power
    46
    We use specific software to do this sort of thing on school machines. You can find many proxy or cache box machines that will do this. Also things like Securus and Impero and RM Smartcache/Auditor can monitor what websites a user visits in great detail.

    Not sure how good internet explorer or firefox history logs are.

  3. #3

    russdev's Avatar
    Join Date
    Jun 2005
    Location
    Leicestershire
    Posts
    6,918
    Thank Post
    708
    Thanked 550 Times in 365 Posts
    Blog Entries
    3
    Rep Power
    204
    Quote Originally Posted by lionsl2005 View Post
    hi ,
    in a computer how can i document the user visited web pages? i checked the browser history while user logged on, he visited some un authorised sites. as a local computer administrator how to document the evidence? visited time, date, site address etc, firefox doesnt seem to have property potion to see the actual visited history date and time. please help
    If of serious nature and work for LA then stop pull power cable (don't shut down) then inform head and LA.

    As anything else and you might ruin any legal case you should not do any of investigation work yourself.

    Russ

  4. #4
    lionsl2005's Avatar
    Join Date
    Nov 2008
    Location
    Barnet
    Posts
    533
    Thank Post
    373
    Thanked 23 Times in 22 Posts
    Rep Power
    16
    Quote Originally Posted by russdev View Post
    If of serious nature and work for LA then stop pull power cable (don't shut down) then inform head and LA.

    As anything else and you might ruin any legal case you should not do any of investigation work yourself.

    Russ
    hmmm i can remember my forensics evidence study in my uni.

  5. #5


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,687
    Thank Post
    352
    Thanked 794 Times in 714 Posts
    Rep Power
    346
    Quote Originally Posted by russdev View Post
    If of serious nature and work for LA then stop pull power cable (don't shut down) then inform head and LA.

    As anything else and you might ruin any legal case you should not do any of investigation work yourself.

    Russ
    Sorry to disagree Russ but if of a serious nature involving the police police/ceop DO NOT turn the machine off the third party will come to you. Our county AUP (and our own internally adapted version) specifically details steps to take in events such as this which includes the above and you're welcome to a copy for advice.

    If your investigation is more for inappropriate usage ie. accessing games during work time or something then IEHistoryviewer can look at the user profile and pull off where and when they've visited sites.

  6. #6

    russdev's Avatar
    Join Date
    Jun 2005
    Location
    Leicestershire
    Posts
    6,918
    Thank Post
    708
    Thanked 550 Times in 365 Posts
    Blog Entries
    3
    Rep Power
    204
    Quote Originally Posted by lionsl2005 View Post
    hmmm i can remember my forensics evidence study in my uni.
    @kmount depends on la some say leave it on and some say pull the power.

    @lionsl2005

    Dosn't matter really as you would still upset the legal case as you would not be able to be an expert in court (unless forensics is what you do for living in which case ignore me even if have studied it).

    If non-serious then ignore this

  7. #7


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,687
    Thank Post
    352
    Thanked 794 Times in 714 Posts
    Rep Power
    346
    Russ, fair enough.

    Horses for courses I suppose.

  8. #8

    russdev's Avatar
    Join Date
    Jun 2005
    Location
    Leicestershire
    Posts
    6,918
    Thank Post
    708
    Thanked 550 Times in 365 Posts
    Blog Entries
    3
    Rep Power
    204
    p.s

    In non serious case still inform the head before looking at the laptop otherwise could get yourself into legal hot water (even if you think you have a water tight AUP).

  9. #9


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,687
    Thank Post
    352
    Thanked 794 Times in 714 Posts
    Rep Power
    346
    I misread, and didn't see Firefox, you'll want MozillaHistoryView instead.

    Depending upon what sparked the investigation will depend upon how you play it as Russ said.

    It's unclear whether you're investigating a member of staff or a student therefore your action plan steps may be different.

    For students we act on our own initiative and prepare a report as per our AUP which goes to the Head of House, and eSafety leader for action. Our Head is only involved if it is a serious issue as she's far too busy for several reports a week on internet misuse by students hence the appointment of an eSafety leader on the SLT. - Our intention once the AUP is fully ratified at governing body level will be to have a reporting means back to the Head/SLT/Governoring body regularly to ensure the correct attention and focus is given.

    Please do post again lionsl2005 as I think what you're doing could be useful for many more people in our shoes.

SHARE:
+ Post New Thread

Similar Threads

  1. Forensic Software on network...............!
    By Kyle in forum Educational Software
    Replies: 27
    Last Post: 9th July 2014, 11:04 AM
  2. Policy Central Professional Entrprise Forensic Software hell
    By tosca925 in forum Educational Software
    Replies: 45
    Last Post: 17th August 2009, 03:18 PM
  3. Forensic Software or School Guardian which one
    By Grommit in forum Network and Classroom Management
    Replies: 19
    Last Post: 24th July 2008, 12:55 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •