Article: Forensic Analysis Without an IDS

I just read this facinating article titled:

Forensic Analysis Without an IDS: A Detailed Account of Blind Incident Response

It describes how the author investigated and identifed a sophisticated hacker breaking into a military webserver.

http://www.fatelabs.com/papers/broken-walls.pdf

Awesome article!!! Completely fascinating! Black hats can be so sophisticated in their exploits.

Good read !!