Know Your Enemy: A Forensic Analysis

[lance () spitzner net (Lance Spitzner)]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
UNSUBSCRIBE: email "unsubscribe ids" to majordomo () uow edu au
I've completed a whitepaper that I feel memebers of
this group may be interested in.

Know Your Enemy: A Forensics Analysis
This paper is a continuation of the Know Your Enemy series. The first three papers covered the tools and tactics of the 
black-hat community.  This paper, the fourth of the series, studies step by step a successful attack of a system.   
However, instead of focusing on the tools and tactics used, we will focus on how we learned what happened and pieced 
the information together.  The purpose is to give you the forensic skills necessary to analyze and learn on your own 
the threats your organization faces. 

http://www.enteract.com/~lspitz/forensics

Hope it helps :)

Lance Spitzner
http://www.enteract.com/~lspitz/papers.html