EH-Net

Ethical Hacking Discussions and Related Certifications => Forensics => Topic started by: linux1 on September 07, 2012, 09:34:12 PM



Title: forensics audit recommendations
Post by: linux1 on September 07, 2012, 09:34:12 PM
I have been having a problem with someone cracking into my computer systems for awhile now and I have been unable to stop it myself. I am thinking it is time to hire a professional to help me find out how they got into my computer and/or network.

Does anyone have any recommendations on who would provide this type of service for a home user? I am looking for someone basically to remote audit my computer and network to find out where any possible exploits may have taken place, and they would have to be experienced with Linux. Most recently I have been running an extremely hardened and locked down linux derivative with a heavily encrypted VPN and still they somehow got into my system (I can tell you why I know that, but for the sake of this discussion let's just assume this is the case).

Can anyone recommend someone who might be able to help with this issue?

Thanks


Title: Re: forensics audit recommendations
Post by: jjwinter on September 08, 2012, 09:19:57 AM
Where are you located? Perhaps someone here lives in your area.

Do you have a wireless access point? Most residential-grade routers can be hacked.

What kind of setup do you have at home? What lead you to believe there was an issue?



Title: Re: forensics audit recommendations
Post by: Eleven on September 08, 2012, 04:50:46 PM
The folks at LinuxQuestions often help people for free, if it's a Linux computer you believe is compromised.  Be prepared to post actual evidence of why you think you've been compromised.  Every once in a while they get someone who is clearly paranoid.

http://www.linuxquestions.org/questions/linux-security-4/


Title: Re: forensics audit recommendations
Post by: chrisj on September 09, 2012, 04:20:59 PM
I'm curious what makes you think you've got people in the system, how you know they're there, and what you did to harden the systems. Are you patches up todate, and have you scanned yourself.