Full Disclosure mailing list archives

AW: Removing FIred admins


From: vogt () hansenet com
Date: Fri, 13 Feb 2004 17:17:42 +0100

Anybody know of a checklist or guide to removing access across the entire 
organization for a "retired" admin?
Mixed environment including Linux, Unix, Windows, Cisco, Nortel

Friend or foe? If he went as a friend, change all passwords you know he
knew, and a couple more just to be safe.

If he went as a foe, and he knows his stuff, burn everything and
reinstall from scratch, there is at least one backdoor you won't find.


Tom

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: