Re: pron on the cp
mentioned thousands of files, over a time period of months, with timestamps indicating porn browsing sessions lasting several hours, interspersed with him sending and receiving emails and reviewing documents.
Once the dodgy link has been followed or the maliciously crafted page has been viewed it can keep updating so can result in many accesses spread over the time the page is open which can easily show the accesses interspersed with genuine work activities.
You're probably right, he may well not be telling the whole truth, but this isn't evidence.
Biting the hand that feeds IT
