New SF Article: Network Analysis of a Public Exploit, Part 1

[Daniel Hanson <dhanson () securityfocus com>]

Even though this is a bit basic for some of the incidents audience,
I felt it might help some of the readers with some of the steps
involved in investigating a security incident. If anyone has additional
thoughts to contribute, please start a discussion.

=-=-=-=-=-


The following article was published on SecurityFocus:

Network Analysis a Public Exploit, Part 1
By Don Parker   Aug 11, 2004

The purpose of this article is to analyze a public exploit in a lab
environment, see the alerts generated by an intrusion detection system,
and then do some packet analysis of the malicious binary in order to
better understand it.

http://www.securityfocus.com/infocus/1795