RE: [MLUG] how did they break in?

[Mike Miller <EMAIL:PROTECTED>]

On Tue, 8 May 2001, Deterding, Brent D wrote:

> How about unplugging it from the network

I can do that.


> dd'ing a copy of the drive,

what does that mean?


> and analyzing that with the "The Coroners Toolkit"?

Interesting.  Found it on the web.  Hadn't heard of it before.


> A tripwire DB?

Don't have it yet.


> Installed from RPM's?

Mostly no.


> This will give you the best chance of actually learning anything
> instead of just fixing it. Make sure they don't get in again . . .

Thanks.

Mike

--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/