Full Disclosure mailing list archives
Re: MCSE training question
From: "morning_wood" <se_cur_ity () hotmail com>
Date: Mon, 5 Apr 2004 19:14:18 -0700
Oh contraire, the first thing we do when we go onsite to work on windows box is ask my client to reboot it first, particularly if it is a server, as occassionally they they do not come back up, and we do not want to be blamed just because the OS is unstable
and you claim to be a security professional? ( Curt Purdy CISSP, GSEC, MCSE+I, CNE, CCDA ) the first thing would be to sit down at the suspect console and observe. the second thing would be to... observe. then i might consider a course of action... possibly the box in question is instable because of a compromise, or a worm or a 0day... what about that Curt? never would i ( or tell anyone ) to just "reboot that box before i touch it" now i know why fortune 500 companies get horrendous infections. "shocked and awed" Donnie Werner http://exploitlabs.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Re: [FD] FD should block attachments Schmehl, Paul L (Apr 02)
- RE: Re: [FD] FD should block attachments Bart . Lansing (Apr 05)
- RE: Re: [FD] FD should block attachments Paul Schmehl (Apr 05)
- RE: Re: [FD] FD should block attachments Bart . Lansing (Apr 05)
- MCSE training question Curt Purdy (Apr 05)
- Re: MCSE training question Joel R. Helgeson (Apr 05)
- Re: MCSE training question Exibar (Apr 05)
- Re: MCSE training question Ron DuFresne (Apr 06)
- RE: Re: [FD] FD should block attachments Paul Schmehl (Apr 05)
- Re: MCSE training question morning_wood (Apr 05)
- RE: Re: [FD] FD should block attachments Bart . Lansing (Apr 05)
- Re: Re: [FD] FD should block attachments Michael Gale (Apr 07)
- <Possible follow-ups>
- RE: Re: [FD] FD should block attachments Mike Smith (Apr 04)
- Re[2]: Re: [FD] FD should block attachments phased (Apr 04)
- RE: Re[2]: Re: [FD] FD should block attachments Mike Smith (Apr 04)
- RE: Re: [FD] FD should block attachments Tremaine Lea (Apr 05)