Detection and Investigation of Compromised Hosts on Campus Networks

Cornell University developed a successful methodology to locate, contain, and investigate compromised systems on our networks. We recently extended this methodology to more effectively respond to compromises that can potentially result in sensitive data loss.