Restoring a Hacked Linux Server

This is a great post at MDLog. Marius goes into great detail on how you should respond when you know a linux server has been compromised.

It’s an interesting read if you’ve ever had the opportunity to be the administrator of a linux server. Probably interesting if you haven’t had that opportunity. None of my systems have ever been hacked, and I admin about 5 linux servers both at home and work. I’ve always sort of had a plan of attack though in the event it did happen. And, I’m happy to say, it would look very similar to Marius’s post.