AIX incident response issues...

[kont]

Hello all,

I would appreciate any input on how to handle a security
incident on AIX systems: any tips, best practices, any
specialized (or not) piece software etc.

We are trying at my workplace to acquire some know-how on
how to handle such events and, maybe more important, how
to act proactively so as to be in a better position should
these events happen (especially, with respect to data
gathering, finding what is going on or what went wrong).

Thanks a lot,
V.

 

[khalidaaa]

Check out these links:

http://www.tek-tips.com/viewthread.cfm?qid=1159517&page=1

publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.security/doc/security/security.pdf

http://www.softpanorama.org/Commercial_unixes/AIX/security.shtml

http://www.ahinc.com/aix/security.htm

Regards,
Khalid

 

[kont]

Thanks !