Re: Linux - Indicators of compromise

[coderman <coderman () gmail com>]

On Mon, Jul 16, 2012 at 10:59 AM, Григорий Братислава
<musntlive () gmail com> wrote:
> ...
> Is in my experience is that I place two folders in directory in is
> root folder called /root/MilaKunisLeakedPhotos/ and
> /root/OlgaKurlyenko/ is when I see is accessed. Then I know is my
> machine compromised. Everyone is want see Olga and Mila

there are honey tokens, and there are *honey* tokens.

Григорий Братислава doing it right!

;P

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/