Commonly Overlooked Audit Trails on Intrusions


Published: Feb 21, 2000 Updated: Feb 21, 2000 Section: Network Security Library :: Auditing Author: Printable Version Adjust font size: Rating: 3/5 - 5 Votes 1 2 3 4 5

This is my attempt of compiling a 'top list' of audit trails that are being left after intrusions where the intruders try to cover their tracks but don't do a good job. To put it short, there are actually a lot of audit trails on a normal UNIX system, which can almost all be overcome, but with some effort, that most intruders evade.

Click Here to download this article