Check with the following things for analyzing server hacks in Linux server
==========================================================================
1)Last command
2)Analyze the following logs
============================
apache error log
apache access log
var/log/messages
apache secure log
3) Verify all the ports
Analyze the following files
============================
/etc/userdomains
/etc/shadow
/etc/passwd
.bash history
/root/bash profile
lsattr
No comments:
Post a Comment