Difficult question to answer. There was a complete lack of "technical" evidence against me (e.g .bash_history files, wiretaps).

The only evidence the prosecution had against me were a list of compromised sites and several coldfusion 0days I had in my possession.

They could never prove that I generated the list of compromised sites, but the judges felt that the possession of said list was enough evidence to convict me.

We would've appealed but there was no point as the sentence was essentially nothing.