Hackers continue to break into systems long after they become familiar with the technology. Instead, many continue to hack simply because of the social status it brings. For many, hacking is a social activity. Hackers meet online to discuss the latest hacking tools, their hacking conquests, and their personal lives. To be truly effective, system administrators and security professionals must become familiar with the social culture in which hackers dwell.
Hackers are no exception.
Cybersleuths must understand the jargon and tools used in this virtual society. By understanding IRC tools and jargon, a cybersleuth can determine the real identity of a hacker from birthplace to current address and telephone number. System logs help administrators and security professionals track down criminals. They are useful as evidence that a crime has been committed, but not for much else. System logs show how and where the electronic bits came from, but they don't show who sent them.