OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Lance Spitzner (lanceSPITZNER.NET)
Date: Tue Jan 23 2001 - 20:11:57 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, 24 Jan 2001, Russell Fulton wrote:

    > I agree that this is desirable, however it is non trivial on most
    > modern systems which don't have handy tapedrives etc.
    >
    > Do you have any suggestions for making this process more straight
    > forward?

    Netcat and dd? This allows you to take images of the compromised
    system without taking it down.

    http://project.honeynet.org/challenge/faq.html#faq3

    lance