Who is watching?

• What logging is active?
  • syslogd
  • tripwire
  • Event log
  • Commercial monitoring and intrusion detection packages
• Find logs
• Turn them off
• Flood them with noise
• Remove incriminating audit trail entries