[Apachebenchmark-sans-t4] SANS Hacker LMP Weekly Update

[<Rya...@at...>]

Hello everyone.

We had a small turnout last night (only 4 people)!  Oh well, I understand
that things come up and you can't make it every week.  Speaking of that - I
wanted to remind everyone that will NOT be meeting next week.  Our next
class will be on Wed, Nov 19th.

Chapters for the next class -

Week 9: Nov. 19th	4.5.2	Keeping Access II - Rootkits and
Kernel-level Rootkits	
	4.5.3	Covering the Tracks I - UNIX, Windows and Networks	
	4.5.4	Covering the Tracks II - Steganography	

Also, someone had a question about Windows based tools for Incident Response
and Forensics.  Foundstone has a bunch of great, free tools -
http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subconte
nt=/resources/freetools.htm

I also uploaded the 3D_Traceroute tool I spoke of to the class website -
http://apachebenchmark.sourceforge.net/sans/3D_Traceroute/.  It is very
small and can run off of a floppy.  

Talk to you all soon.

> Most Respectfully,
> Ryan C. Barnett
> SANS: GCFA, GCIH, GCUX, GSEC
> Department of Justice - ATF
> Information Services Division
> Operations Security Team Lead
> Email: Rya...@at...
> Pager: Rya...@sk...
> Phone: 202-927-2913
> 
>