[NBLUG/talk] Security guides..

[Mark Street]

I had some experience with this awhile back...

I would check out the honeynet project

honeynet.org

It depends on the rootkit that was used and how good they were at using
it.

On Sat, 11 Oct 2003, Steve Johnson wrote:

> I was just wondering (yah I cant sleep again :P)  Is there a good guide
> out there that walks you through checking your system to see if it has
> been hacked?  I know most boxes are rooted by script kiddies, and as a
> matter of fact the last 3 or more machines that I detected an intruder,
> the kiddies were to stupid to clean their tracks.  (left directories
> like ... or ". something")
>
> What are some good steps for auditing a system?  If you were to be hired
> to check out someones linux (or even bsd) box, what would be some of the
> things you would check first?
>
> -Steve
>
> _______________________________________________
> talk mailing list
> talk at nblug.org
> http://nblug.org/mailman/listinfo/talk
>
>