I would like to report to you the case has been notified about someone else has access to e-mail account nattikan@siamtobacco.com , without permission. From that I have to contact the Aware of request logging to check timestamp user nattikan@siamtobacacco.com . During 17-23 November 2015 according to the attachment we can be identified that has person are login to e-mail abnormal. By a person in STEC have Login to access e-mail of Nattikan using pass web browsers. Which I have to ask user confirm that she never to access e-mail through web browser and unknown before that can do, but in logging there are reports have someone to access e-mail by web browser tools will in logging is identified as (webmail) but if using outlook normally logging report identifies a (POP3) or (IMAP).
Therefore, I can conclude that someone in company have access to E-mail of Nattikan access by web browser and using a computer and internet in STEC to access that e-mail because logging report it has been identified a source IP Address from STEC. The period of time specified in the report for time zone UTC-5:00 Eastern time (US & Canada) located rack space which is slower than Thailand 12 hours.
But I can't identify any staff and computer machine who is to action. Because we have logging system to tracking such individuals in reference to lake of forensic for investigator who to do this.