Linux Security HOWTO : What To Do During and After a Breakin : Security Compromise has already happened
Previous: Security Compromise Underway.
Next: Closing the Hole

10.2. Security Compromise has already happened

So you have either detected a compromise that has already happened or you have detected it and locked (hopefully) the offending attacker out of your system. Now what?

10.2.1. Closing the Hole

10.2.2. Assessing the Damage

10.2.3. Backups, Backups, Backups!

10.2.4. Tracking Down the Intruder.


Linux Security HOWTO : What To Do During and After a Breakin : Security Compromise has already happened
Previous: Security Compromise Underway.
Next: Closing the Hole