Joomla and JCE Website Compromise: What to Do After Finding a Web Shell
A Joomla incident account explains suspicious uploads, web-shell capabilities, evidence limits, and why cleanup must include the original entry point.
Tag: web shell
The 2021 Exchange Vulnerabilities: Patching and Investigating Compromise
A corrected historical account of the March 2021 Exchange attacks explains why patching, evidence preservation, and incident investigation are separate tasks.
