Re: keylogger?

From: John Daniele (johnd@tsintel.com)
Date: 01/23/02 

Date: Wed, 23 Jan 2002 14:26:08 -0500 (EST)
From: John Daniele <johnd@tsintel.com>
To: Michael Ullrich <ullmic6@web.de>

Hi Michael,

Before even considering the specifics of installing surveillance devices,
do consider what you are trying to accomplish. Be clear as to what your
company's intentions are. Are they to simply fire this individual or
perhaps press charges. Perhaps you have already done this, but in either
case I would advise you to review your company's HR policies before
proceeding. Ensure that your HR policy specifically states that your
employees may be closely monitored for internal security purposes. Also
ensure that the suspect has signed off understanding and acceptance of
these policies. If not, you may want to coordinate this operation with
your company's lawyers as you may or may not be violating this
individual's privacy rights, if any.

If your company does intend to press charges, I would encourage you to
enlist the services of a computer forensic investigator to assist in
collecting evidence that can be admissible in the court of law. There are
very strict procedures that need to be followed in order to meet
admissibility requirements. Also consider the possibility that this
individual files a wrongful dismissal suit. Having evidence on your side
collected in accordance with the law may help prevent the suit from
progressing any further.

Also consider the possibility that once you begin monitoring this
individual, you are witness to other, unrelated, criminal acts. You may be
required by law to report this activity to the proper law enforcement
authority. If proper procedure was not followed from the beginning, that
evidence may or may not be admissible; making law enforcement's job that
much more difficult.

----------------------------------
John Daniele
Technical Security & Intelligence
Toronto, ON
Voice: (416) 605-2041
Email: johnd@tsintel.com
Web: http://www.tsintel.com
----------------------------------

On Wed, 23 Jan 2002, Michael Ullrich wrote:

> It looks like as if somebody in our company is misusing
> the pcs of others. We have already changed passwords and stuff.
> But nevertheless I want to install some kind of logging software on pcs
> which we left open. The audit policy on NT4 (which is the os of those
> pcs) is not enough. Does anybody know good logging software that is
> free. It would be good if this could be installed without
> Admin rights.
>
> Thanx
> Mike
>
> ______________________________________________________________________________
> 100 MB gute Gründe. Jetzt im WEB.DE Club anmelden und Prämie sichern!
> Superstars, Topevents und Wunschrufnummer inklusive - http://club.web.de
>
>

Relevant Pages

  • Re: Newspapers to be Charged??
    ... Michael Richardson wrote: ... United States of America. ... it almost sounds as if you mean to break the law in some way. ... the bankers provide this information under ...
    (rec.sport.billiard)
  • Re: Can OS 10.4.7 be put on a Windows PC
    ... you would be doing the same thing by installing OS X ... It might be breaking an unenforcable EULA, ... "breaking the law". ... install it on THEIR Winboxes. ...
    (comp.sys.mac.advocacy)
  • Re: Attention actual and wannabe road and traffic engineers...
    ... >> Michael G. Koerner wrote: ... but I and the law disagree with you. ... Germany; now, I've never driven there nor even been to Germany to tell ...
    (misc.transport.road)
  • Re: Chris Langaham Interview Grauniad
    ... That's a defence to libel, ... there is no paedophilia involved. ... The term is not recognised in law. ... not curable, Michael. ...
    (uk.media.tv.misc)
  • Re: W2K "ntoskrnl.exe"
    ... "Michael" wrote in message ... > After installing the SP4 I restarted the computer and got ... > the message that I should reinstall the ntoskrnl.exe. ... > has been suggested that the SP4 "ntoskrnl.exe" is diferent ...
    (microsoft.public.win2000.windows_update)