Underground And Other Stuff

WinDump, the Windows version of tcpdump, can help you analyze network
traffic to look for signs of active malware. Contributor Serdar
Yegulalp explains how to use WinDump and some of its applications.
http://searchwindowssecurity.techtarget.com/tip/1,289483,sid45_gci1147392,00.html?track=NL-122&ad=532656

MORE INFO:

Analyzing security logs
http://searchwindowssecurity.techtarget.com/tip/1,289483,sid45_gci1104239,00.html?track=NL-122&ad=532656

Detecting rootkits
http://searchwindowssecurity.techtarget.com/featuredTopic/0,290042,sid45_gci1110450,00.html?track=NL-122&ad=532656