OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
New SF Article: Network Analysis of a Public Exploit, Part 1

From: Daniel Hanson (dhansonsecurityfocus.com)
Date: Thu Aug 12 2004 - 11:10:08 CDT


Even though this is a bit basic for some of the incidents audience,
I felt it might help some of the readers with some of the steps
involved in investigating a security incident. If anyone has additional
thoughts to contribute, please start a discussion.

=-=-=-=-=-

The following article was published on SecurityFocus:

Network Analysis a Public Exploit, Part 1
By Don Parker Aug 11, 2004

The purpose of this article is to analyze a public exploit in a lab
environment, see the alerts generated by an intrusion detection system,
and then do some packet analysis of the malicious binary in order to
better understand it.

http://www.securityfocus.com/infocus/1795