A Paper on Rootkits

[Galitz <galitz () uclink berkeley edu>]

This may not be directly related to a particular incident,
but it may be useful to keep in mind during the analysis phase 
of an intrusion.

It is aimed at the entry to mid-level sysadmin and security admin.

I invite (useful) feedback, including corrections.

http://www.cchem.berkeley.edu/College/unix/docs/rootkit.html

-geoff



-- 
-----------------------------------------------------------------------
Geoff Galitz                     |  "Beer is proof that God loves us."
Research Computing, UC Berkeley  |     Theodore Roosevelt
galitz () uclink berkeley edu       |
-----------------------------------------------------------------------