drop site’

Assume your web server farm was found to be operating as a ‘drop site’ for attackers who were active in other companies. What would your investigative priorities be? How would you demonstrate that the incident was handled in a competent manner?

You may also like...