https://www.blackhat.com/presentations/bh-europe-06/bh-eu-06...
Gives pretty good insight into what steps go into this kind of work.