[ISN] Honeynet Scan of The Month #29

From: InfoSec News (isnat_private)
Date: Wed Sep 03 2003 - 22:33:58 PDT

  • Next message: InfoSec News: "[ISN] Windows & .NET Magazine Security UPDATE--September 3, 2003"

    Forwarded from: Lance Spitzner <lanceat_private>
    ---------- Forwarded message ----------
    Date: Mon, 1 Sep 2003 17:25:34 -0500
    From: Brian Carrier <carrierat_private>
    To: Forensics <forensicsat_private>, honeypotsat_private
    Subject: Honeynet Scan of The Month #29
    The latest Honeynet Project's Scan of the Month has finally been
    released.  We think you will find that it was worth the wait though.
    Your mission is to conduct incident response and analyze a live image
    of a compromised Linux Red Hat 7.2 system.  Using VMWare, the honeypot
    system was suspended and the challenge is to verify the incident and
    analyze it, while minimizing the impact you have on the potential
    evidence.  An eval copy of VMWare workstation can be used for the
    The image details and a full list of questions can be found at:
    Because of the amount of work involved in this challenge, a full month 
    will be given.  All submissions must be returned no later than 23:00 
    GMT September 29, 2003.
    Brian Carrier
    ISN is currently hosted by Attrition.org
    To unsubscribe email majordomoat_private with 'unsubscribe isn'
    in the BODY of the mail.

    This archive was generated by hypermail 2b30 : Thu Sep 04 2003 - 01:25:22 PDT