Re: how to find trace of attacks

["Dotan Cohen" <dotancohen@gmail.com>]

2008/12/30 abdelkader belahcene <abelahcene@gmail.com>:
> Hi,
> I fear that an attack or an entry in my PC has occured,  how to find the
> trace of the attacks.
>
> thanks a lot
>

It really depends upon what you suspect occurred,and how, and what the
machine is responsible for. Be more specific.

1) Why do you suspect that your machine was compromised?
2) What does the machine do? Desktop machine? Sensitive nuclear
secrets database?
3) Does the computer contain information that, if leaked, could
compromise your organization?
4) Does the computer contain information that, if erased, could be a
liability to your organization?
5) How recent is your last backup that is known to be from before the breach?
6) Is identifying the attacker a priority?

You should probably consult a forensics expert if this is anything
other than a home desktop.

-- 
Dotan Cohen

http://what-is-what.com
http://gibberish.co.il

א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
ا-ب-ت-ث-ج-ح-خ-د-ذ-ر-ز-س-ش-ص-ض-ط-ظ-ع-غ-ف-ق-ك-ل-م-ن-ه‍-و-ي
А-Б-В-Г-Д-Е-Ё-Ж-З-И-Й-К-Л-М-Н-О-П-Р-С-Т-У-Ф-Х-Ц-Ч-Ш-Щ-Ъ-Ы-Ь-Э-Ю-Я
а-б-в-г-д-е-ё-ж-з-и-й-к-л-м-н-о-п-р-с-т-у-ф-х-ц-ч-ш-щ-ъ-ы-ь-э-ю-я
ä-ö-ü-ß-Ä-Ö-Ü