Among my many areas of responsibility at work, is contacting all the users found in various data breach lists that our InfoSec team get their hands on (typically, these are the same lists that eventually make their way to HIBP). Not unsurprisingly, there is a significant amount of overlap between some of these lists, and one of the things I do is to ensure that I do not contact users about passwords I’ve already talked to them about.
A few months ago, I had a user call in complaining that Excel would freeze and become completely unresponsive when she was working in a specific workbook. It was fairly large (10MB), but well within what the computer should have been able to handle. I opened a remote session to the computer, and started troubleshooting. My first step, as always in these cases, was to look at the event logs, which showed no relevant entries. Next, I inspected one of the files in question.