Incident Response

From: <esecuritydude_at_gmail.com>
Date: 7 Jun 2007 14:20:51 -0000

('binary' encoding is not supported, stored as-is) Hi List,

I'm currently doing a uni assignment where I have to investigate an intrusion into a *nix file server and describe:

a) What I would do for the current incident

b) What I would recommend for the future.

Does anyone have any classic real life examples of this? and where could I find a good/standard incident response procedure?

Thanks in Advance,
Miguel
Received on Jun 07 2007