RE: Administrator's Journal

["Preston, Tony (N-AS&T)" <tony.preston () lmco com>]

At one place I worked, I had 4 device drivers I maintained.  The method
There was a web page where you would basically fill out a form and it
would add to the log for the system.  There were many systems and
without a log you never would keep track of what systems were not
updated.

In addition, the standard manual log book was attached to each system.

It was not 100%, sometimes a HW type (or me, the SW type) would get 
Interrupted with a fire and forget to go back and add your entry, but
most of the time it worked pretty well.

Never saw any software that was specifically designed to track changes
in a more automated way.

Tony Preston
Systems Engineer, AS&T Inc.
Division of L3 Corporation
(609) 485-0205 x 181


-----Original Message-----
From: Jeff [mailto:Jeff@Not_A_Real_Address.com] 
Sent: Monday, May 10, 2004 11:52 AM
To: security-basics () securityfocus com
Subject: Administrator's Journal

Not certain where else to send this ... but am open to suggestions.

In the past I have kept paper journals about everything that has
been done to a specific machine; date setup, software installed,
passwords for iLO etc., OS patches installed, app patches installed,
configuration changes.

If nothing else, it's been tedious and as a result, often incomplete.
It is very easy to "tweak and run". Later, while trying to remember
why you, (or worse, was it you or someone else) made the change, you
vow again to document better.

Is anyone aware of "Administrator's Journal" software? I would love
to be able to document on a much better scale the who, what, where,
when and how of install/changes, including the ability to add
attachments like the pdf of how to install the application change
or a link to a web page that documents what was done.

Thanks,

Jeff








---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------