Forensic Tool and S...
 
Notifications
Clear all

Forensic Tool and Sharepoint

4 Posts
4 Users
0 Likes
705 Views
donven
(@donven)
Posts: 26
Eminent Member
Topic starter
 

Anyone know of any software that can be used to pull data from MS Sharepoint while keeping the data forensically sound AND doesn't change the last modified date on the webpage?

I have used Safecopy2 that allows me to take the information from Sharepoint with keeping the metadata intact. However when you look at the web base front end it says I was last to modify the document.

After comparing hash of files it showed that data was not modified.

Any help would be appreciated!!

 
Posted : 17/04/2009 6:07 pm
(@bedpan)
Posts: 6
Active Member
 

All the sharepoint data is stored in a SQL backend. I would think you would be better off attacking the SQL data as you can then control all the writes. I am no SQL expert but you would need full read access to all the databases then you could start pulling everything out.

Mike

 
Posted : 29/04/2009 5:26 pm
datacarver
(@datacarver)
Posts: 121
Estimable Member
 

Ontrack has a tool for it, but its in its early stages. Still needs some work in my mind, but I'm actively looking into this area and out R&D group is working on a tool in-house.

 
Posted : 29/04/2009 6:53 pm
(@lancesl)
Posts: 2
New Member
 

Microforensics has a tool called Titan Collector for SharePoint that will do exactly what you need. Follow this link to the web site http//www.microforensics.com/pages/software-titan-sharepoint.php and call Rob Feigenbaum at (408) 402-3131 begin_of_the_skype_highlighting (408) 402-3131 end_of_the_skype_highlighting.

Of course do your testing.

From the web site

Titan for SharePoint supports the forensic collection of Microsoft SharePoint information, providing a fast and defensible means of collecting a MS SharePoint site while maintaining the exact look-and-feel as it existed at the time of collection. Titan does not impact the SharePoint working environment while collecting.

Titan collects the document libraries and maintains them as native copies, collects all metadata fields including custom and system metadata, and captures an exact MHTML representation of the page. This approach ensures an exact replica of the site can be maintained, reviewed and produced – ensuring the collection matches the original.

 
Posted : 08/05/2010 7:58 am
Share: