Investigating hacking activities is both a legal and a technical challenge. This talk aims at sharing experience about the different typical scenarios around attacks against information systems, the role of law enforcement and also the role of victims, whether they are corporations or inviduals. Subjects covered will include the detection, the analysis of traces and potential evidence, as well as the identification of suspects or international cooperation.