The tag has no wiki summary.

learn more… | top users | synonyms

18
votes
10answers
15k views

How do I know if my Linux server has been hacked?

What are the tell-tale signs that a Linux server has been hacked? Are there any tools that can generate and email an audit report on a scheduled basis?
15
votes
11answers
90k views

Best way to find the computer a user last logged on from?

I am hoping that somewhere in Active Directory the "last logged on from [computer]" is written/stored, or there is a log I can parse out? The purpose of wanting to know the last PC logged on from is ...
2
votes
3answers
437 views

How to find out if my server is compromised?

I have a linux VPS and I received a complaint that my server was scanning on port 22 some other network. How do I find out if it was compromised or not?
1
vote
0answers
153 views

How to identify vulnerability (.htaccess files have been added/modified) [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY All the .htaccess files inside doc roots of all my virtual hosts seem to have been hacked and have the following code prepended to ...
0
votes
1answer
683 views

Configuring MySQL logging for an audited environment such as SOX

How do you configure MySQL users and logging to satisfy SOX auditors? For example, if you need to log queries and the source of the query for later review by an internal SOX controls group. Is there ...