Penetration Testing mailing list archives
Re: [PEN-TEST] eMail auditing problem
From: Mathew Bevan <listhandler () NTLWORLD COM>
Date: Wed, 13 Sep 2000 21:31:05 +0100
Note, If you reinstall ANYTHING be sure that you have forensically frozen the scene. Make backups of everything, generally if you just go ahead and reinstall your prosecution would fail.
- the mail server is hacked => reinstall it, try to prosecute the hacker
- the boss box is compromised (BO2K), and all his keystrokes are logged - surely some others ...
Unlikely but there are some nifty devices which clip between the keyboard and computer. Great fun in physical tests I assure you.. 8-) Mathew Bevan
Current thread:
- [PEN-TEST] eMail auditing problem Groh, Jens (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Nicolas Gregoire (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Mathew Bevan (Sep 13)
- Re: [PEN-TEST] eMail auditing problem DA Smith (Sep 14)
- Re: [PEN-TEST] eMail auditing problem Mathew Bevan (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Jose Nazario (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Karyn Pichnarczyk (Sep 13)
- <Possible follow-ups>
- Re: [PEN-TEST] eMail auditing problem Justin Schaefer (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Erik Tayler (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Jan Muenther (Sep 14)
- Re: [PEN-TEST] eMail auditing problem pete (Sep 14)
- Re: [PEN-TEST] eMail auditing problem Erik Tayler (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Brentlinger, Mike (ISS eServices) (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Dunker, Noah (Sep 13)
- Re: [PEN-TEST] eMail auditing problem Oxenreider, Jeff (Sep 13)
(Thread continues...)
- Re: [PEN-TEST] eMail auditing problem Nicolas Gregoire (Sep 13)