Quote:
Originally Posted by VincentVega
Good stuff. Some folks have no idea how the most basic IT security/networking actually works. I'm sure it wasnt him, someone gained control of his machine. Yeah, they beat all of your security, left no trace, authenticated correctly and he didnt know anything was going on. Yeah, thats it.
|
Former job, the co was facing a class action lawsuit that would have cost potentially millions. We kept all logs, captures, etc. forever (literally). It was no problem "mining" the VPN logs (intensive mode capture) for several thousand daily users going back two years, and showing exactly what sites the claimant visited (cross mapped with other security type (firewall, etc.) logs. The legal dept. loved me....made it a slam dunk and royally pissed off "Jackie Childs" too
....but no, it's not even remotely feasible to capture "what you typed" on anything but predetermined very small scale.
ps: I had to use "big iron" (mainframe power) to crunch the data though....SQL on a server would still be running
