What tools and techniques exist for locating changes to a large file tree composed of multiple software projects and user-uploaded files? [duplicate]
I've discovered that my client's website was compromised a few months before they hired me to perform an upgrade on their CMS and CRM. The attacker exploited a vulnerability that allowed them to ...
I've got too many messages from PAM logging into audit.log, like this: type=USER_ACCT msg=audit(1378995943.792:867411): pid=4419 uid=0 auid=4294967295 ses=4294967295 ...
Current Situation I have a client with many (200x) CentOS 5.x servers deployed in various web, mail, database and file server roles, and these boxes have been variously administrated to a lessor or ...
Recently (but it is also a recurrent question) we saw 3 interesting threads about hacking and security: My server's been hacked EMERGENCY. Finding how a hacked server was hacked File ...