±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 35119
New Yesterday: 3 Visitors: 203

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Microsoft One Drive

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Microsoft One Drive

Post Posted: Wed Jan 25, 2017 7:02 pm

A client claims that his friend stole his documents by installing "One Drive" on his laptop, and synced all the desktop and documents files from it. That has been going for a few moths.

Besides obviously checking if one drive was installed/uninstalled on the laptop and checking if there are any deleted or existing files in its folder, how can i track its activity and see if it synced any files to the cloud?

Or even better, if someone used its "fetch files" option (https://support.office.com/en-us/article/Fetch-files-on-your-PC-70761550-519c-4d45-b780-5a613b2f8822"

I would appreciate any input on the topic, thank you  

DataR
Member
 
 

Page 1 of 1