Index_L

---

L

L0phtcrack tool, 228-233

LaBrea utility, 313

LanMan hashes, 223, 228-233

LANs (local area networks), 454

last command, 605, 614

last tool, 123, 124-125

lastb command, 605

lazarus tool, 698, 706-710

len qualifier, 469

less qualifier, 469

libpcap, 465-466

libraries

DLL, 50, 478, 577, 767

OpenSSL, 297

pcap, 465-466

LibWhisker, 171

lilo.conf file, 662

Linksys SOHO firewalls, 404-405

Linux kernel, 282-286, 612

Linux platform

buffer overflows, 297, 299

cleansing evidence drives, 659

Cygwin and, 58

enhanced loopback and, 661-662

loopback devices, 661-664

losetup tool, 660-661

md5sum, 666-669

msec tool, 247-251

passwords, 210-214

RedHat Linux. See RedHat Linux distribution

running in Windows environment, 50

system hardening, 244-251

system policy, 210-214

Titan tool, 244-247

transforming files into devices, 660-661

Trinux tool, 572-577, 652

Tripwire tool, 342-351

vim tool, 757

web browser files, 732

Linux servers, 286-287

listen mode, 437-438

live response tool kit

Unix systems, 599-614

Windows systems, 577-598

LKM (loadable kernel module), 285-286, 612

LKM root kits, 612

local area networks (LANs), 454

local evidence files, 655-658

local loopback, 660

local redirection, 445-446

Local Security Authority (LSA), 144, 235

Local Security Policy

Windows 2000 platform, 210

Windows XP platform, 210

lockouts, 145-146

log files

Achilles tool, 196

application logs, 591-592

collecting with PSTools, 164

consolidating, 164

dumpel tool, 590-592

event logs, 154-158, 590-592

PsLogList, 154-158, 164

security logs, 591-592

syslog, 16

syslogd, 16-17

web servers, 176-177

log rules, 502

loggedon utility, 589

logging

forensic duplication and, 629-630, 654-655

keystrokes, 30, 458

login.conf file, 214-216

logins

brute-force attacks, 140-141

displaying, 148

number of, 140-141

Loki tool, 275-279

lookups, hostname, 94

loopback

enhanced, 661-664

local, 660

loopback devices, 661-664

loose routing, 17-18

losetup tool, 660-661

ls command, 602-604, 613-614

LSA (Local Security Authority), 144, 235

lsadump2 utility, 235-236

lsmod command, 285-286

lsof command, 599, 613

lsof tool, 605-607

---