Rocco Network You receive a frantic call from the system administrator of the Alexander Rocco network, JW Tabacchi. He tells you he has identified several intrusion attempts from sources over the Internet. Youre not sure if the hackers have gained access to the internal network.

Question: First, based on the tools described in this chapter and some of the techniques youve learned in this book, write a one-page report about the things you might look for to identify an attacker or a compromised host on your network. Second, make some recommendations on how you might instrument the network with network protection systems to better detect and prevent compromises in the future.