PPT Slide
Case #2 (2 of 3): Breaking and Entering
1215: An error is noted in the execution of rpc.statd. (syslog
file)
1216: User root edits the index.html file through a remote
xterm session. There is no log of this.
1243: Director receives call from Animal Rights International
bragging that they attacked a Revlon computer.