WORD FILES - Date modified query - URGENT

ronben

Check the recent folder firstly, Start, Search, All Files and Folders, use recent as the search criteria, click on more advanced options and tick "search hidden files and folders" make sure you are looking in the C:\ drive then hit search when a folder called recent appears and your stuff isnt listed then you have proof that you havent worked on the file, if it is listed it will show a date of when last used/modified.

Do a trial firstly so you get the gist of it, if there are your files in their just make sure you dont incriminate yourself.

BTW, If the files are still on the PC why not just delete them all but make sure you have them at home first then when the boss asks to see them just tell him that hes probably high on mustard gas or something as the files wont be there anymore

ronben

Smirch_This wrote: »

The modified date is not conclusive as it can be forged with software tools.

But then if no software is installed on thw works machine then no forgery can take place.

Actually just thinking, If you right click a Word document in the My Documents folder or where ever stored then click on Properties then click on summary then on advanced a lot more info will appear.

And Date Created - Date Last saved - and edit Time will appear, I post this as I dont know if you had used the Advanced option.

fwor

ronben wrote: »

But then if no software is installed on thw works machine then no forgery can take place.

That's not correct. The OP (or his boss) could boot the work machine from a bootable CD or pendrive (e.g. a Linux LiveCD), modify anything they wanted to on the hard disk and leave no readily traceable evidence behind.

ronben

fwor wrote: »

That's not correct. The OP (or his boss) could boot the work machine from a bootable CD or pendrive (e.g. a Linux LiveCD), modify anything they wanted to on the hard disk and leave no readily traceable evidence behind.

I think were getting into the realms of James Bond, not forgetting thats if the have priveledges to install/run from a pen drive and then find the right .doc

So pretty correct Id say.

fwor

ronben wrote: »

I think were getting into the realms of James Bond, not forgetting thats if the have priveledges to install/run from a pen drive and then find the right .doc

I wasn't commenting on what ~you~ are capable of. I was commenting on what someone who understands these things might do - and that doesn't exactly enter the realms of James Bond.

I reckon it would take me about 10 minutes to do, and I'm not an expert.

Fountaine

Thanks everyone for your input. My dad used to say if you had a run of bad luck, you must have killed a Robin. I feel as if I have done in a flock of them ! Goodnight

ronben

fwor wrote: »

I wasn't commenting on what ~you~ are capable of. I was commenting on what someone who understands these things might do - and that doesn't exactly enter the realms of James Bond.

I reckon it would take me about 10 minutes to do, and I'm not an expert.

But none the less highly improbable just to look at a couple of .docs, so maybe the mysterons.

PROLIANT

Your Employer is in breach of the Data protection act and is liable for prosecution, take the tw*t to court and screw him the way he has done you, I work as an IT Support Engineer and I can assure you what he has done is illegal, you are the victim he is the criminal, hope his business gets flushed down the sh**ter and you walk away with a tidy sum of money, get legal advice ASAP.

fwor

PROLIANT wrote: »

Your Employer is in breach of the Data protection act and is liable for prosecution, take the tw*t to court and screw him the way he has done you, I work as an IT Support Engineer and I can assure you what he has done is illegal, you are the victim he is the criminal, hope his business gets flushed down the sh**ter and you walk away with a tidy sum of money, get legal advice ASAP.

I fully support the OP in his efforts to defend himself against what looks like it could be heading for "constructive dismissal" but...

I don't see how you can invoke the Data Protection Act here! The employer is looking at the contents of the HDD of a workstation that he owns, and he finds that some of the disk space is occupied by the personal data of one of his employees. I don't think you'll find that he has broken any laws there.

I doubt that he is breaking any laws by asking the OP how they came to be there.

I don't know if he would be breaking any laws by opening those personal files and looking at their content - but the OP has not said that the employer has done that.

What he can't do is point to the "modified" date on those files to ~prove~ that the OP was working on them during office hours, for reasons given further up this thread.

PROLIANT

fwor wrote: »

I fully support the OP in his efforts to defend himself against what looks like it could be heading for "constructive dismissal" but...

I don't see how you can invoke the Data Protection Act here! The employer is looking at the contents of the HDD of a workstation that he owns, and he finds that some of the disk space is occupied by the personal data of one of his employees. I don't think you'll find that he has broken any laws there.

I doubt that he is breaking any laws by asking the OP how they came to be there.

I don't know if he would be breaking any laws by opening those personal files and looking at their content - but the OP has not said that the employer has done that.

What he can't do is point to the "modified" date on those files to ~prove~ that the OP was working on them during office hours, for reasons given further up this thread.

Eh you have to go through proper procedure with the employee present when doing this in order to make it legal and be able to use it as evidence in order to bring it to a hearing which has to be notified in writing giving no shorter than 48 hours notice, email and web traffic can be monitored AdHoc with out telling the employee/s, document's if are tampered with or read with out the knowledge of the author is illegal and is inadmissible as evidence.