±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 34287
New Yesterday: 0 Visitors: 212

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Office 365 forensic

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Office 365 forensic

Post Posted: Sun Aug 05, 2018 11:12 am

Dear all,
I am interested in improving my skills.
If I need to acquire a company that use store data on onedrive use share point etc which software is available?

Thanks  

giandega
Senior Member
 
 
  

Re: Office 365 forensic

Post Posted: Mon Aug 06, 2018 2:03 am

The most straightforward thing to do would be to speak to an O365 Admin at the company in question and get them to produce the data for you from the Security and Compliance Centre from within O365.

The built in e-Discovery tool is extremely powerful across large scale enterprise.

From within the Security and Compliance Centre your Admins should have access to the UAL (unified audit log) to produce any log files you require to prove file access, folder access, times and dates, deletions etc.

Check out this link to Microsoft's support pages where you can find loads of good information:

Microsoft O365 Support - Manage e-Discovery Cases  

hectic_forensics
Member
 
 
  

Re: Office 365 forensic

Post Posted: Mon Aug 06, 2018 11:13 am

thank you very much. It's great  

giandega
Senior Member
 
 
  

Re: Office 365 forensic

Post Posted: Tue Aug 07, 2018 1:46 am

You're welcome. Smile  

hectic_forensics
Member
 
 
  

Re: Office 365 forensic

Post Posted: Fri Aug 10, 2018 11:02 am

My former colleague Adam Harrison has published some decent research into this very area:

blog.1234n6.com/2018/0...nt_12.html  

redcat
Senior Member
 
 
  

Re: Office 365 forensic

Post Posted: Mon Aug 13, 2018 2:34 am

thanks  

giandega
Senior Member
 
 

Page 1 of 1