Help: I got hacked. Now what do I do?
Jesper M. Johansson, Ph.D., CISSP, MCSE, MCP+I, Security Program Manager Microsoft Corporation provides an insight on what to consider after a break-in takes place. Here's an example:
"You may not be able to trust your latest backup. How can you tell when the original attack took place? The event logs cannot be trusted to tell you. Without that knowledge, your latest backup is useless. It may be a backup that includes all the back doors currently on the system."
[ Read more ]