you could go further and do
for /f %%a in ('net view ^| find "\\" ') do dir %%a\c$\*.jpg /a /b /s >>
list.txt
for /f %%b in ('list.txt') do move %%b \\server\evidence
then use blat(cmd emailer) to mail the list.txt to an
administrator/yourself.
i think each loop of the first FOR loop would append filenames to list.txt
so for the 2nd FOR loop the file would contain the all jpg's on all
computers.
this works cos the dir cmd produces output like:
\\t10-comp\c$\folder\filename
if you used scopy instead of move (I suppose youd have to do a del
afterwards)
it would copy the security permissions so you could see who owned the file
(ie who downloaded it)
there are endless possibilities
regards browolf
Security Forums
==============================
http://www.security-forums.com
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: 14 January 2003 14:47
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: RE: Network Scan
>
>
> While logged in as a domain admin:
>
> Dir /A /B /S \\usermachine\c$ | find /I ".jpg"
>
> Etc. Automate with Tool Of Your Choice and that should work for you..
>
