A followup document on Team Evil's methodology to attack and deface sites as well as how such attacks can be investigated, has been released today by Beyond Security's beSIRT.
A follow up is being released today, on a second incident. Following what Team Evil did, their methodology and how it changed since the first document was released.
The aim of this document is more to show how such analysis is done, on an educational note. The PDF can be found here:
