Linux Security HOWTO
: What To Do During and After a Breakin
: Security Compromise has already happened
Previous: Security Compromise Underway.
Next: Closing the Hole
10.2. Security Compromise has already happened
So you have either detected a compromise that has already happened or
you have detected it and locked (hopefully) the offending attacker out
of your system. Now what?
Linux Security HOWTO
: What To Do During and After a Breakin
: Security Compromise has already happened
Previous: Security Compromise Underway.
Next: Closing the Hole