FW: Forensics Tools

[Thomas Carter <tcarter () AUSTINCOLLEGE EDU>]

In response to a good question (thanks Joshua) the laptop and data should not be encrypted.

Thomas Carter
Network and Operations Manager
Austin College
903-813-2564
[cid:image001.gif@01CFD717.414A1EF0]

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas 
Carter
Sent: Tuesday, September 23, 2014 10:17 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Forensics Tools

I'm looking for good forensics tools for dealing with an individual's laptop. Specifically looking for changes 
/deletions /etc.  I do realize the minefield this can be, and will be done at the request of, and in conjunction with, 
the HR department and school lawyers. Are there any packages anyone has used in the past they can recommend?

Thomas Carter
Network and Operations Manager
Austin College
903-813-2564
[cid:image001.gif@01CFD717.414A1EF0]