as far as i know, the net sends in my school are logged and have a time next to them. so if someone wanted they could find the comp and look up the user for the time period of the net send.