Paper on Tracking The Enemy

[Lance Spitzner <spitzner () dimension net>]

I'm finishing up a whitepaper entitled
"Know Your Enemy: II, Tracking Their Moves".

The paper focuses on how to determine what the enemy
is doing based on system logs files, specifically what
they are probing for and what tools they are using. I
base the paper on two of the most commonly used scanning
tools, sscan and nmap.

As many of you are nmap (and maybe sscan) gurus, I would
greatly appreciate an recommendations, experiences, or
corrections you may be able to offer.

http://www.enteract.com/~lspitz/enemy2.html

Thanks!

Lance Spitzner
http://www.enteract.com/~lspitz/papers.html
Internetworking & Security Engineer
Dimension Enterprises Inc