Security Incidents: Re: Forensics CD

["Boutros" <boutros () swissonline ch>]

Security Focus ran a monthly serial a while back called "No Stone Unturned"
about the forays of a Sys Admin into the realm of forensics.  Although
fictional, there is some very useful info in the story (it's good reading to
boot).  In particular, parts 5 and 6 have a good overview of the kinds of
tools to include on a forensics CD.  Part 6 can be found here:

http://online.securityfocus.com/infocus/1618
<http://online.securityfocus.com/infocus/1618>

<<attachment: winmail.dat>>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com