Black Hat Las Vegas '00 Training
Intruder Discovery / Tracking and Compromise Analysis

• Introduction
• Framework for Incident Handling (Dominique)
• Obstacles to data gathering (Dave)
• "Anti-rootkit" Analysis Toolkit (Dominique)
• Cryogenic (Dominique)
• The Coroner's Toolkit (Dave)
• Investigation / Reporting (Dave)
• Q&A

[Start]

Dominique Brezinski & Dave Dittrich

Last modified: Fri Jul 14 21:39:30 PDT 2000