This is case study where I used Netwitness products to track a succesfull penetration at a customer site. The case study shows the importance of Netwitness's product suite and includes reports from Informer, Investigator and Spectrum. It helped me investigate the attack, the complete methodology used by attacker, tools he used, the data exfiltrated.
Questions are welcome.
