Re: Incident Response Guidelines

["Luis Enrique Londono" <lelondono () impsat com co>]

I think that a good document is BCP0021 (RFC2350) "Expectations for Computer
Security Incident Response" ( http://www.ietf.org/rfc/rfc2350.txt ).

Luis Enrique

----- Original Message -----
From: "John Smithson" <why1234 () hotmail com>
To: <security-basics () security-focus com>; <forensics () securityfocus com>
Sent: Friday, December 27, 2002 11:42 AM
Subject: Incident Response Guidelines


> Hello,
>
> I'm about to start huge documentation phase on creating Incident Response
> Guidelines / Handling - including creating the structure, creating the
> Incident Response Team, documenting the guidelines per incidents - such as
> web server hacked, DOS attack, Virus Outbreak
>
> I need your help on pointing me to few good documents / books.  Obviously,
I
> have googled, and found good info.  However, I may be missing some good
> information that you gurus have collected over time.
>
> Please any help would be greatly appreciated.
>
> Thanks,
>
> John Smithson
>
>
>
>
>
> _________________________________________________________________
> MSN 8 limited-time offer: Join now and get 3 months FREE*.
http://join.msn.com/?page=dept/dialup&xAPID=42&PS=47575&PI=7324&DI=7474&SU=
>
http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_newmsn8ishe
re_3mf
>