RE: Incident Response Guidelines

["DeGennaro, Gregory" <Gregory_DeGennaro () csaa com>]

SANS also has incident response training ... track 4 is an outstanding
class!

I took the class (track) and it was awesome!

www.sans.org for an area near you or for more information.


Greg

-----Original Message-----
From: Ayers, Diane [mailto:DAyers () pacbell net]
Sent: Saturday, December 28, 2002 4:40 PM
To: security-basics () security-focus com
Subject: RE: Incident Response Guidelines


Check with CERT. I attended a week long incident response training class
with them and they may have some info available for you to use.

Diane

-----Original Message-----
From: John Smithson [mailto:why1234 () hotmail com]
Sent: Friday, December 27, 2002 8:42 AM
To: security-basics () security-focus com; forensics () securityfocus com
Subject: Incident Response Guidelines


Hello,

I'm about to start huge documentation phase on creating Incident Response
Guidelines / Handling - including creating the structure, creating the
Incident Response Team, documenting the guidelines per incidents - such as
web server hacked, DOS attack, Virus Outbreak

I need your help on pointing me to few good documents / books.  Obviously, I
have googled, and found good info.  However, I may be missing some good
information that you gurus have collected over time.

Please any help would be greatly appreciated.

Thanks,

John Smithson





_________________________________________________________________
MSN 8 limited-time offer: Join now and get 3 months FREE*.
http://join.msn.com/?page=dept/dialup&xAPID=42&PS=47575&PI=7324&DI=7474&SU=
http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_newmsn8ishe
re_3mf