New answers tagged incident-response
Perhaps you are being hack via man in the middle? Scan for mac adresses on your network. With cain and abel you can see who is on it, and then if they are on it, you can report it to the feds.
Incident response is as much as matter of framework and policy as it is a matter of tools. Use the document here (http://www.sei.cmu.edu/reports/03hb002.pdf) to define a set of guidelines and procedures. You may find that the toolset isn't as important as the methodology. You may also find that the methodology defines your toolset.
Top 50 recent answers are included