Printable View
Recently a couple of users on my network were caught with inapropriate materials on their computers. Where there is one there are probably others, so we began digging through more user's machines and found even more. Go figure.
I am looking for a utility or something that I can use to scan my user's computers remotely for images and video. If it can be automated, then that is even better.
Has anyone else had to deal with this kind of problem before?
just do a file search for mpg's & stuff and jpg's & stuff. do it after hours so it doesn't bog down your server. if you use roaming profiles, you can also search for links and cookies to bad sites on the server.
over the years i have found some staff with this junk at work. warez as well. i just delete it automatically. i find that bringing it up with managers usually becomes a bigger hassle than it's worth. (i am in a unionized workplace. god help you if you get the union on your back!). you also sometimes get the 3rd dergee, "how much do you spy on staff!!"...blah blah... and if you have a policy - they will throw it back at you and accuse you of not doing a good enough job of promoting user awareness & policy awareness & stuff. all in all, causes big hassle.
anyways, not the kind of crap one wants to get into at work. there are too many other more important thing to do.
If your company's willing to drop some cash, I highly recommend EnCase Enterprise Edition.
Quote:
EnCase Enterprise Edition is a powerful network-enabled incident response system that provides immediate and thorough forensic analysis of volatile and static data on compromised servers and workstations anywhere on the network; without disrupting operations.
My experience is only with EnCase Forensic Edition (which I love) but EEE is highly regarded, and I've heard nothing but praise from my colleagues who use it. :D
Downfall: It's pricey. :rolleyes:
We have been mapping to the user's hard drives and doing searches that way but it is very time consuming and we have been short handed lately. Automation would greatly help in our case. We do not use roaming profiles here, profiles are restricted to the machines that the users log into.
I"m not too worried about unions here. The users all sign a network use policy and also complete a computer based trainign course regarding acceptable use. I got plenty of ammo.
Our boss is super PO'd about finding this crap on our network but due to the number of users involved, we just want to get the our machines (about 120) clean and start fresh. After this there will be no more chances or excuses heard.
Caf
If what you have been seeing is a large size of the hard drive being taken up we used a program called treesizepro What it does is allow you to locally or remotely scan the hard drive for the largest folders/files.... the best part is it will search all formats including hidden files and folder. This worked great for us because it will list everything and you dont really have to login to the comptuer.
Grab a sniffer. As just a start alone... I would be filtering out based on certian keywords, block access to sites with a certian number of images/links this would of course in turn kill off almost any porn gallery worth browsing, they all put 'em up in mass quantities but just in case im sure you could even filter out based on the size of the images & of course movies wouldn't be office documentation :p.
If your anti-porno thing is so important then why don't you just talk to someone who is most likely a good 80% of your problem... and probably should have been doing what some of your policies and agreements talk about in the first place, and thats watching out what goes on in the network... and by that, I am reffering to your lan-man.
Just to update. We have no control over the firewalls and filtering. That is already taken care of by another group of folks. I am the lan-man for the local network in our building. I have been tasked to implement a scanning policy just to keep an eye on things. So we will be scanning a couple of comps per week. Just to keep them on their toes and to let the users know that "the Man" is watching.
Surprisingly, this was never an issue before, or at least since I've been here.
Caf
You might also try Content Watch (free scanner for porn)
http://www.contentwatch.com/audit/index.php?pid=580-103
Quote:
ContentAudit is a free online tool that safely checks your PC for explicit or other unwanted content picked up from the Internet.
Greetings:
Hrm... I bet if I clicked on that link my computer would unintentionally cause a denial-of-service attack against their system.Quote:
Originally posted here by CXGJarrod
You might also try Content Watch (free scanner for porn)
http://www.contentwatch.com/audit/index.php?pid=580-103
:rolleyes:
CXG: ContentWatch sounds awfully familiar. Doesn't that have malware deep inside of it? I could have sworn I heard that it contains a form of spyware/adware.