Article: Forensic Analysis Without an IDS

[SoggyBottom]

I just read this facinating article titled:

Forensic Analysis Without an IDS: A Detailed Account of Blind Incident Response

It describes how the author investigated and identifed a sophisticated hacker breaking into a military webserver.

http://www.fatelabs.com/papers/broken-walls.pdf

[Redbone]

Awesome article!!! Completely fascinating! Black hats can be so sophisticated in their exploits.

[kadeng]

Good read !!