I have a strange one
I recently resigned from my job, and my former employer ran a forensic analysis on my former corporate machine. They found something alarming in the report, which says that the day before I resigned, someone plugged into my corporate laptop a USB device that had GO!Suite sofware on it (I did no such thing). They explain that this software is used to do mass file transfer (I had to look it up). They say that the device was physically plugged in, windows recognized it, and a drive letter was assigned. They are citing a date, a time, and a serial number for the device.
At the time, I was working from home, and I was logged in, sitting in front of my computer. I did not plug any device into my laptop at the time. Nobody besides me had any physical access to this computer. Therefore the ONLY explanation that I can think of is that this device could have been mounted through some remote connection from the Corporate PC support team. They say that this is not an approved device or software, so therefore it couldn’t have been them, but logically I have no other explanation.
Is it possible, that if a USB device was plugged in to the remote machine while PC Support was connecting to my computer over VPN, they could have mounted it on my local machine’s Windows Regstry? I’m not saying anyone did anything wrong, maybe one of the guys in the PS Support Lab uses this device at times – and “corporate” doesn’t know about it?
Sorry if this is not a precise enough question – I’m at my the end of my rope here. They are creating serious problems for me with these false accusations. I just want to help them get to what really happened so we can go our separate ways.
Appreciate any help that the community can provide. Are there any explanations for this? Are Computer Forensics analysis often so confidently incorrect that a firm would accuse and potentially defame a former employee?
Thank you for reading, and I appreciate your expertise.
GB
