RSnake comments (at Dark Reading) about the perils of home-grown forensics, and how, if you’re not careful, you can end up making a mess of it.
“It’s best to treat a hack event like a fire. Stop, drop, and roll. Once you’ve done that, hopefully you’ll have come to your senses enough to know you need to hire a professional.”
Read it here. It’s good advice.


