Unix/Linux Incident Response resources

[Jon Schipp <jonschipp () gmail com>]

Hey guys,

Do you know of any good resources e.g. books, articles, cheat sheets on
incident response for *nix machines.

Things I'm looking for e.g. uses of "find", "grep", "strings", and tools
covering time stamp information etc.

Basically, going through your typical unix tools except with a IR
perspective/focus. I figured something like this would help me pay more
attention to things on my systems.

Thanks
Jon

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com