How do you handle server security/intrusion monitoring?
Sanguinez: * you use logs so you can be aware of suspicious events at network, system and app level* you have scripts to analyze these logs and notify you if anything suspicious happens. This is faster, can be done more often and is less tedious for you* you have some reference files somewhere so you can compare checksums