Re: images for computer forensics?

El Lunes, 26 de Febrero de 2007 17:30, Ansgar -59cobalt- Wiechers escribió:
Hi list, was wondering if anyone knows of any online resources I can
visit that has got real life case studies of cybercrime and actually
has got the disk image of the server that was hacked? or even a disk
image of a system that was used to compromise a server? Went over to
honeynet.org and they do have an image of a purposely hacked redhat
6.2 but I will prefer a resource that will have actual disk images
from a crime scene.

Try

http://www.seguridad.unam.mx/eventos/reto/

Each year UNAM university (Mexico) and CSIC (Spain) celebrate an event in
forensics analisys.

You can find in this page a "windows exercise", the images and the winners
reviews. Also you can find the "old links" to the previous events where you
can find linux forensics exercises.



--
Pablo Sanz Mercado
Centro de Computación Científica
Universidad Autónoma de Madrid
-
http://rincon.uam.es/cgi-bin/v2/dir.cgi?cw=284899902343750

---------------------------------------------------------------------------
This list is sponsored by: BigFix

If your IT fails, you're out of business - or worse. Arm your
enterprise with BigFix, the single converged IT security and operations
engine. BigFix enables continuous discovery, assessment, remediation,
and enforcement for complex and distributed IT environments in real-time
from a single console.
Think what's next. Think BigFix.

http://ad.doubleclick.net/clk;82309979;15562032;o?http://www.bigfix.com/ITNext/
---------------------------------------------------------------------------

Relevant Pages

  • Re: images for computer forensics?
    ... visit that has got real life case studies of cybercrime and actually ... has got the disk image of the server that was hacked? ... image of a system that was used to compromise a server? ... BigFix ...
    (Security-Basics)
  • RE: use of base image / delta image for automated recovery from a ttacks
    ... base disk image shared by multiple virtual machine instances. ... your basic web application might have a web server ... partition and the changeable datafiles on another partition. ... Apache to install a trojan or a backdoor on the more exposed web server. ...
    (SecProg)
  • use of base image / delta image for automated recovery from attacks
    ... base disk image shared by multiple virtual machine instances. ... your basic web application might have a web server ... partition and the changeable datafiles on another partition. ... Apache to install a trojan or a backdoor on the more exposed web server. ...
    (SecProg)
  • images for computer forensics?
    ... was wondering if anyone knows of any online resources I can visit ... disk image of the server that was hacked? ... have an image of a purposely hacked redhat 6.2 but I will prefer a resource ... BigFix ...
    (Security-Basics)
  • FAX a virus
    ... My FAX server allows me to receive faxes from my clients from Internet. ... My clients send me some documents using their built-in Fax Printer on their PC. ... The whole scenario is windows environment and let's assume that virus protection is temporarily off. ... Arm your enterprise with BigFix, the single converged IT security and operations engine. ...
    (Security-Basics)