„This document outlines suggested steps for determining if your system has been compromised. System administrators can use this information to look for several types of break-ins. We encourage you to review all sections of this document and modify your systems to close potential weaknesses.
We also encourage you to check with your vendor(s) regularly for any updates or new patches that relate to your systems. „
US-CERT: Intruder Detection Checklist
US-CERT: Intruder Detection Checklist