Incident Response and Computer Forensics on Rootkits

Lets pick up where we left off with the rootkit and post-exploitation video (http://www.youtube.com/watch?v=izv1b-BTQFw). Except, we are now doing incident response.

First you'll see some normal live forensics on the victim and come up with nothing. Then we show how using network forensics techniques (looking at the victim from the outside) we start to see clear evidence of "doh! we've been owned".

We walk through how to see these signs and prove to them that what Windows and traditional forensics is telling them is a LIE in this particular investigation.

You'll learn how to do this type of forensics technique and many more from our InfoSec Institute Computer Forensics Boot Camp: http://www.infosecinstitute.com/courses/computer_forensics_training.html

Category:

Science & Technology

Tags:

• computer forensics
• forensics
• incident response
• hacking
• hackers
• tutorial
• computer hacks

[aking1012]

hxdef allows placing the listenener as a mitm on an existing port...a much better ide

a

[mbowler05]

good vid, when is the next video?

[tachi203]

Why you telling the enemy this shit!!!!!!!!!!!!. ffs.

[YoshiErfurt]

Nice Vid !!!