Case Project 13-2: Detecting Hackers in the Alexander Rocco Network

You receive a frantic call from the system administrator of the Alexander Rocco Network, JW Tabacchi. He tells you he has identified several intrusion attempts from sources over the internet. You're not sure if the hackers have gained access to the internal network. First, based on the tools described in this chapter and some techniques you've learned in this book , write a one page report about the things you might look for to identift an attacker or a compromised host on your network. Second, make some recommendations on how you might instrument the network with network protection systems to better direct and prevent compromises in the future.