Nice, @basistechnology posted my slides from #OSDFCon on triaging compromised systems with few resources: http://cdn2.hubspot.net/hub/165417/file-377400132-pdf/presentations/osdf-2013/Willi_Ballenthin.pdf [pdf]