Anything Left by the Hacker
Network Sniffers (monitor and log network activity to a file)
Trojan Horse (Spoofed program with added or removed features to hide their activity)
Vulnerability Exploits (usually in hidden directory, with known documented vulnerabilities to gain ‘ROOT’ access)