[ISN] Honeynet Scan of The Month #29

From: InfoSec News (isnat_private)
Date: Wed Sep 03 2003 - 22:33:58 PDT

  • Next message: InfoSec News: "[ISN] Windows & .NET Magazine Security UPDATE--September 3, 2003" 

    Forwarded from: Lance Spitzner <lanceat_private>

---------- Forwarded message ----------
Date: Mon, 1 Sep 2003 17:25:34 -0500
From: Brian Carrier <carrierat_private>
To: Forensics <forensicsat_private>, honeypotsat_private
Subject: Honeynet Scan of The Month #29

The latest Honeynet Project's Scan of the Month has finally been
released.  We think you will find that it was worth the wait though.

Your mission is to conduct incident response and analyze a live image
of a compromised Linux Red Hat 7.2 system.  Using VMWare, the honeypot
system was suspended and the challenge is to verify the incident and
analyze it, while minimizing the impact you have on the potential
evidence.  An eval copy of VMWare workstation can be used for the
challenge.

The image details and a full list of questions can be found at:

     http://www.honeynet.org/scans/scan29/

Because of the amount of work involved in this challenge, a full month 
will be given.  All submissions must be returned no later than 23:00 
GMT September 29, 2003.

thanks,
Brian Carrier



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomoat_private with 'unsubscribe isn'
in the BODY of the mail.

    This archive was generated by hypermail 2b30 : Thu Sep 04 2003 - 01:25:22 PDT