A Paper on Rootkits

From: Galitz (galitzat_private)
Date: Thu Jun 21 2001 - 18:46:29 PDT

  • Next message: Aropalo Tommi: "Re: New maniac rootkit"

    This may not be directly related to a particular incident,
    but it may be useful to keep in mind during the analysis phase 
    of an intrusion.
    
    It is aimed at the entry to mid-level sysadmin and security admin.
    
    I invite (useful) feedback, including corrections.
    
    http://www.cchem.berkeley.edu/College/unix/docs/rootkit.html
    
    -geoff
    
    
    
    -- 
    -----------------------------------------------------------------------
    Geoff Galitz                     |  "Beer is proof that God loves us."
    Research Computing, UC Berkeley  |     Theodore Roosevelt
    galitzat_private       |
    -----------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Jun 22 2001 - 18:13:17 PDT