Make copies of the log and configuration files Disconnect system from the network. UITS Security Office staff will assist you in handling the intrusion, and will also notify all relevant agencies as required. To send sensitive information, use our encrypted mail gateway . If you receive your e-mail on the compromised system, please indicate this, and include an alternate address at which you can be reached. It is imperative that in addition to the e-mail notification above, you also notify your local support center.
Various departments have internal support arrangements and notification procedures.
Notifying UITS Security Office and the Local Support Center should not stop anyone from also using local notification procedures. In many cases, intrusions either started on a neighbor's machine or sprung to a neighbor's machine. It is imperative to notify known local system administrators of a potential or real intrusion. This increases the chances of quicker discovery of an intrusion and helps contain and limit it's scope. This is a more difficult and time consuming task, but often necessary to avoid a redundant system re-install.