Whitepaper: Oracle Forensics Part 4 – What an incident responder should do during a Live Response on a compromised Oracle server.
You can download it from the following link: https://packetstormsecurity.com/files/download/56824/LiveResponse.pdf
Source: https://packetstormsecurity.com/files/56824/LiveResponse.pdf.html