LeMarchand Posted March 11, 2019 Posted March 11, 2019 If the worst comes to the worst, I'm guessing that this could be done by recording the screen, but does anyone know a cleaner way to do the above? Got someone who needs to prove that they were at work on a particular day (the Head has already corroborated this and it wasn't good enough) and the screen shot "could be from any phone". (Mistaken identity - or malicious? - insurance claim).
bald_pig Posted March 11, 2019 Posted March 11, 2019 I would have thought that the screenshot would have the phone info embedded in exif data, same as a photo. 1
MYK-IT Posted March 11, 2019 Posted March 11, 2019 Must admit, I am not certain as to what you mean... However, (although I may be totally incorrect as what you are attempting to achieve) but if phone (mobile) was on your network (BYOD etc.) there would be a log, of that device's MAC address, or at least that user's account authenticated on your network - therefore you would have date/time stamps etc. As i said, I may have totally misinterpreted your request! 1
LeMarchand Posted March 11, 2019 Author Posted March 11, 2019 I would have thought that the screenshot would have the phone info embedded in exif data, same as a photo. Good idea - will check (though I guess it could be argued that that could be faked!). Must admit, I am not certain as to what you mean... However, (although I may be totally incorrect as what you are attempting to achieve) but if phone (mobile) was on your network (BYOD etc.) there would be a log, of that device's MAC address, or at least that user's account authenticated on your network - therefore you would have date/time stamps etc. As i said, I may have totally misinterpreted your request! Trying to prove that someone was at work (and not having an accident the other side of the country). Not sure if they have access to the wireless network (or if there are logs going back that far), but will take a look.
MYK-IT Posted March 11, 2019 Posted March 11, 2019 (edited) Trying to prove that someone was at work (and not having an accident the other side of the country). Not sure if they have access to the wireless network (or if there are logs going back that far), but will take a look. On that basis, I would imagine if someone was on-site, working, they would register against at least one, if not more of the following??? Domain Controller Security Logs Internet Access / Filtering Logs CCTV footage (if installed / applicable) Office365 Auditing (will show your school's public IP) against user's login / activity for the day etc. Files created by user (may need to refer to older backups, if updated since etc.) Print Logs Door / Key Card Logs (if installed) etc... Edited March 11, 2019 by MYK-IT 1
hardtailstar Posted March 11, 2019 Posted March 11, 2019 You can go back on the timeline on the phone How about asking said member of staff to go through it with one of you? If they were at work then they would have no problems showing this. 1
bald_pig Posted March 11, 2019 Posted March 11, 2019 another thought is that you can use adb to trigger a screen recording, so you can show that its his phone? 1
LeMarchand Posted March 11, 2019 Author Posted March 11, 2019 (edited) On that basis, I would imagine if someone was on-site, working, they would register against at least one, if not more of the following??? Domain Controller Security Logs Internet Access / Filtering Logs CCTV footage (if installed / applicable) Office365 Auditing (will show your school's public IP) against user's login / activity for the day etc. Files created by user (may need to refer to older backups, if updated since etc.) Print Logs Door / Key Card Logs (if installed) etc... Thanks. some good ideas, some I'll need to work out how to do/if feasible and some that won't fly. (LEA has filter logs and Jesus is more likely to pop up again before they get anything done). You can go back on the timeline on the phone How about asking said member of staff to go through it with one of you? If they were at work then they would have no problems showing this. another thought is that you can use adb to trigger a screen recording, so you can show that its his phone? Yep, we can see the "proof" in the timeline but the argument is that the screenshot could be from any phone. Not sure what adb is, but there are plenty of screen recording apps. Was hoping to find a neater way of doing it. Edited March 11, 2019 by LeMarchand
bald_pig Posted March 11, 2019 Posted March 11, 2019 Thanks. some good ideas, some I'll need to work out how to do/if feasible and some that won't fly. (LEA has filter logs and Jesus is more likely to pop up again before they get anything done). Yep, we can see the "proof" in the timeline but the argument is that the screenshot could be from any phone. Not sure what adb is, but there are plenty of screen recording apps. Was hoping to find a neater way of doing it. Android Debug Bridge. Most of the apps will want root access, which the phone probably won't have enabled.
Andrew_C Posted March 11, 2019 Posted March 11, 2019 Tell the insurance company to do one? Offer to see them in court? If your colleague was at work, and has the Head as a witness, I'd be inclined to tell them to boil there collective heads. 1
Knil92 Posted March 11, 2019 Posted March 11, 2019 If it's an android phone, isnt there a google journeys thing that tracks where you have been? could you not use that?
bald_pig Posted March 11, 2019 Posted March 11, 2019 If it's an android phone, isnt there a google journeys thing that tracks where you have been? could you not use that? Always forget about this! https://www.google.com/maps/timeline
LeMarchand Posted March 11, 2019 Author Posted March 11, 2019 Tell the insurance company to do one? Offer to see them in court? If your colleague was at work, and has the Head as a witness, I'd be inclined to tell them to boil there collective heads. Apparently head's word doesn't trump the "independent witness". If it's an android phone, isnt there a google journeys thing that tracks where you have been? could you not use that? Always forget about this! https://www.google.com/maps/timeline Doesn't have the phone's number stamped on it. Looking like videoing the screen may be the easiest option!
bald_pig Posted March 11, 2019 Posted March 11, 2019 Apparently head's word doesn't trump the "independent witness". Doesn't have the phone's number stamped on it. Looking like videoing the screen may be the easiest option! It has the phones serial number tied to it, surely that trumps a removable SIM?
hardtailstar Posted March 11, 2019 Posted March 11, 2019 Doesn't have the phone's number stamped on it. Looking like videoing the screen may be the easiest option! But it will be linked to the users google account if they are logged into one on the phone. From what I have gathered, your member of staff was in school that day but being accused of an incident miles away? Could this member of staff been anywhere else that day? they should of been caught on CCTV somewhere.
jthompson Posted March 11, 2019 Posted March 11, 2019 Tell the insurance company to do one? Offer to see them in court? If your colleague was at work, and has the Head as a witness, I'd be inclined to tell them to boil there collective heads. I'm inclined to agree: it does rather sound like the burden of proof belongs to the other party (i.e. it's up to them to provide proof that this person wasn't at work). If they're claiming that the screenshot could be from another phone, then why would a video of a phone be any different?
LeMarchand Posted March 11, 2019 Author Posted March 11, 2019 It has the phones serial number tied to it, surely that trumps a removable SIM? But it will be linked to the users google account if they are logged into one on the phone. Where are these things, though? From what I have gathered, your member of staff was in school that day but being accused of an incident miles away? Could this member of staff been anywhere else that day? they should of been caught on CCTV somewhere. Yes, but the alleged incident was early last year... I'm inclined to agree: it does rather sound like the burden of proof belongs to the other party (i.e. it's up to them to provide proof that this person wasn't at work). If they're claiming that the screenshot could be from another phone, then why would a video of a phone be any different? Proof: You'd think, but I guess it's down to billable hours. I think they just want proof that the screenshot came from the user's phone.
MYK-IT Posted March 11, 2019 Posted March 11, 2019 Perhaps they may have used their credit / debit card during that day... to buy fuel, food etc. Could look back at statements / receipts. Would determine location. 1
GrumbleDook Posted March 11, 2019 Posted March 11, 2019 If there is concern about someone faking identity as part of a fraudulent claim or stating that they were not at the scene of an accident then I would also suggest contacting the police. Whilst the insurance company has a duty to prevent fraud, identity theft and fraud also fall within the remit of the police. An employer stating an employee was at work on a given date, at a given location and has been paid for that days work is a credible witness. I am sure that others from the school can also provide witness statements to say similar too. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now