[TriLUG] [ISN] Honeynet Scan of The Month #29 (fwd)

[Dan Monjar]

You have already seen this but just in case, it might be of interest to 
some:

---------- Forwarded Message ----------
Date: Thursday, September 04, 2003 12:33:58 AM -0500
From: InfoSec News <isn at c4i.org>
To: isn at attrition.org
Cc:
Subject: [ISN] Honeynet Scan of The Month #29

Forwarded from: Lance Spitzner <lance at honeynet.org>

---------- Forwarded message ----------
Date: Mon, 1 Sep 2003 17:25:34 -0500
From: Brian Carrier <carrier at cerias.purdue.edu>
To: Forensics <forensics at securityfocus.com>, honeypots at securityfocus.com
Subject: Honeynet Scan of The Month #29

The latest Honeynet Project's Scan of the Month has finally been
released.  We think you will find that it was worth the wait though.

Your mission is to conduct incident response and analyze a live image
of a compromised Linux Red Hat 7.2 system.  Using VMWare, the honeypot
system was suspended and the challenge is to verify the incident and
analyze it, while minimizing the impact you have on the potential
evidence.  An eval copy of VMWare workstation can be used for the
challenge.

The image details and a full list of questions can be found at:

     http://www.honeynet.org/scans/scan29/

Because of the amount of work involved in this challenge, a full month
will be given.  All submissions must be returned no later than 23:00
GMT September 29, 2003.

thanks,
Brian Carrier



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo at attrition.org with 'unsubscribe isn'
in the BODY of the mail.

---------- End Forwarded Message ----------



--
Daniel Monjar
IS Manager, Technical Services
bioMérieux, Inc.
Durham, NC US
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://www.trilug.org/pipermail/trilug/attachments/20030904/7221ceb7/attachment.pgp>