What shall I do, if I recognise that a hacker is attacking my computer system now?
With an IHS you will be prepared to handle the incident. If you do not have an IHS and you recognise that a hacker has attacked a computer system, the best thing to do is disconnect the system from the net. Further, it is usually necessary to make a seizure of the attacked system and of the log protocols. It is important to make a full back-up so that evidence (i.e. IP-address, login-time) can be collected. If there is a serious threat or damage, it is recommended that it should be reported to the police.
