@hal_pomeranz On Brucon you told where to look for anomalies beyond the log files. But I can't remember what exactly that was.
2
@digihash Check out the "Linux Forensics for Non-Linux Folks" talk at deer-run.com/~hal/ - it has a lot of the info you're looking for
Oct 27, 2014 · 11:07 PM UTC