"6. (C) INFORMATION GATHERING. Our MOD interlocutors credit
Estonian law enforcement and cyber security experts'
(public and private) close monitoring of Russian-language
internet forums as key to CERT's ability to rapidly respond
to the attacks. On April 28, less than 24 hours after the
first cyber attacks, Russian-language internet forums
(e.g.,
http://2ch.ru and
http://forum.xaker.ru) were
exhorting people to attack specific GOE websites and
offering links to software tools. Patient monitoring of
these internet-forums led to intelligence on targets,
dates, and exact times for coordinated attacks.
XXXXXXXXXXXX told us privately that without this
information, the cyber attacks against GOE sites could hav
inflicted far more damage than they did." (2007-06-06 14:02)
http://www.wikileaks.ch/cable/2007/06/07TALLINN375.html (перевод -
http://ruleaks.net/archives/304)
via Во время
кибератак 2007 года на Эстонию эстонским экспертам удавалось минимизировать ущерб при помощи мониторинга старого двача. Причем урл его даже попал в сообщение из американского посольства в Таллинне в госдеп США (в раздел "Полученные уроки: что сработало"). Ололо!