Tools to Help Detect DDoS Tools
NIPC Tools – locates installations on hard drive by scanning file contents
Zombie Zapper – puts Trinoo, TFN, Stacheldraht, and Shaft zombies “to sleep” when flooding http://razor.bindview.com
Remote Intrusion Detector (RID) : Locates Trinoo, Stacheldraht, TFN on network http://www.theorygroup.com/Software/RID/