Notes from the Microsoft campus
Tim Rains and Robert Hensing are members of the Microsoft Product Support Services Incident Response team. Their blogs are a must read, especially if you are interested in investigating system intrusions and compromises.
