Tag Info

New answers tagged

0

My solution would be: The user innocent compiles THC-Hydra from source, then realises that he / she is missing a necessery lib and installs it (hence the sudo aptitude install libssh-2 on innocent-laptop). He / she then proceeds to use Hydra against naive's ssh roughly at 18:22:30 (as marked by the network configuration). The attack succeds at 18:50:29. ...


0

You don't have to overthink this problem. If someone is willing to physically change the printout on the on-site printer, it's easy to just steal the computer and go away. Or force shutdown the server, create a image of the disk, backdoor the image, and put it back. And this is highly improbable, unless you are a very important target, and I think you are ...


5

To meet this requirement, I think you'll want to look into a dedicated log server. No remote access, not even SSH. Syslog is the only service. Credentials are unique to the logging server. That's pretty reliable. Depending on your case, it could be anything from a pimped-out, highly reliable commercial chassis to a RaspberryPi hanging on a nail.


0

It depends on the type of device First and foremost, the kind of information you can recover depends on what kind of device and how that device is used. For instance, a USB attached drive has very different information than a NAS solution. USB Attached Devices USB Attached devices are treated as a typical disk. The forensic information you could recover ...


1

This entirely depends on the infrastructure behind the wireless AP you are connected to. What can be seen more less: Phone Model, Location, Used Services, Used or In Usage Applications (such as application names), Bandwidth usage, Total amount of data spend per application.(both incoming and outgoing), Visited web sites(url list) and total amount of ...



Top 50 recent answers are included