Daily Blog #105: Sunday Funday 10/6/2013 - Finding Non Working Employee Challenge

Finding Non Working Employee Challenge by David Cowen - Hacking Exposed Computer Forensics Blog

Hello Reader!,
       It's Sunday Funday Time! This week we return with another full forensic image challenge. I like the full image challenges as not only do they let you show some practical skills, but it gives me some easy blog posts after to show how to solve them! If you have not already done so, download the forensic image here.

The Prize:

  • A $200 Gift Card to Amazon

The Rules:

  1. You must post your answer before Monday 10/7/13 4PM CST (GMT -5)
  2. The most complete answer wins
  3. You are allowed to edit your answer after posting
  4. If two answers are too similar for one to win, the one with the earlier posting time wins
  5. Be specific and be thoughtful 
  6. Anonymous entries are allowed, please email them to dcowen@g-cpartners.com
  7. In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post

The Challenge:

This scenario should remind you of one of your most early cases. HR has come to you and identified an employee who does not seem to spend much time working. They want to know the following to determine if the employee should be disciplined or fired:

1. What non work site have they visited.

2. How many times per day do they visit these non work sites.

3. Can you determine how long they were spending on non work sites.

4. Was there communication to other employees over non work sites.

Good luck!

Also Read: Daily Blog #104

Post a Comment