Honeynet Scan of The Month #29

[InfoSec News <isn () c4i org>]

Forwarded from: Lance Spitzner <lance () honeynet org>

---------- Forwarded message ----------
Date: Mon, 1 Sep 2003 17:25:34 -0500
From: Brian Carrier <carrier () cerias purdue edu>
To: Forensics <forensics () securityfocus com>, honeypots () securityfocus com
Subject: Honeynet Scan of The Month #29

The latest Honeynet Project's Scan of the Month has finally been
released.  We think you will find that it was worth the wait though.

Your mission is to conduct incident response and analyze a live image
of a compromised Linux Red Hat 7.2 system.  Using VMWare, the honeypot
system was suspended and the challenge is to verify the incident and
analyze it, while minimizing the impact you have on the potential
evidence.  An eval copy of VMWare workstation can be used for the
challenge.

The image details and a full list of questions can be found at:

     http://www.honeynet.org/scans/scan29/

Because of the amount of work involved in this challenge, a full month 
will be given.  All submissions must be returned no later than 23:00 
GMT September 29, 2003.

thanks,
Brian Carrier



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn'
in the BODY of the mail.