Details

Written by Jon Moore

Published: 14 October 2015

Early this year, I discovered my server was acting... kinda wonky (details here). In short, I feared that my server had been hijacked for some other, nefarious purposes. After that, I decided to start a forensics analysis, detailed here. 8 months later, after much additional research, I am looking back at my notes and writing up my "final word" on the matter.

Details

Written by Jon Moore

Published: 18 March 2015

In a bit of a panic, I moved all kinds of grub files, without fully realizing the consequences later on... In any case, I am going over the files that I do have, and noting what differences may exist. If there's anything that would cause my booting problems, it is likely the bootloader, grub.

Details

Written by Jon Moore

Published: 01 April 2015

In my ongoing desire to determine who/what/when/where/why my server had previously been compromised, I continue my analysis with the messages files and some other /var/log files.

Details

Written by Jon Moore

Published: 11 March 2015

Here I go over the following files /etc/hosts*

This works out to 3 files total.