DNC Hack and So Called The Missing Server

I’ve been doing incident response for quite some time now and there’s a lot a things that are not being put out there. So let’s talk about the “missing server” using, I don’t know, how about facts? I’ve never worked an intrusion where we’ve had all the evidence we wanted. There’s always logs missing, aged off, or deleted by the attacker. In every case, we are forced to look at the data we have and then make judgments even with the missing data. We don’t call the missing data a conspiracy, we just call it business as usual. Continue reading “DNC Hack and So Called The Missing Server”