LinuxFest Northwest 2018: You Think You've Been Hacked The First 30 Minutes
Alex Juarez
Something is not right. Your site might be down, you might see a spike in traffic. You are not sure, but you think you might have just been compromised.
This is something most administrators will go through as some point in their career. When you realize it, you might not be sure what to do. You might not be ready it. How can you even be sure you’ve been comprised?
Let’s talk about some tools and techniques you can use to help determine the severity and possibly the vector of attack. This talk will be a quick primer on information gathering tools like tcpdump, rkhunter as well include a few bashed together scripts from here and there.
We will talk about ways to potentially be ready in case it does happen to you and provide links to resources and examples you can take home.