Tuesday 8 May 2007

Logfiles..first look

I processed some of our logfiles..and what did in found there?
Minutes, previous to the main attack, the northern securitygrid had been shut down.
Interesting.
Logfiles on the security pc are deleted.
But he did not have access to the production cluster.
His attempt to randomly move the satellite dish out of azimuth was clever.
Also he should have seen, that our cluster automatically moves it back into default position, if no link can be established.
I will work through those files again and see if i can extract a name, login or email..*sigh*

No comments: