Re: Software for Tracking Security Incidents

[James Moore <jhmiso () RIT EDU>]

Purdue developed a product called the CERIAS incident response database.
RIT provided some design review and debugging support.  We ran out of
funds and manpower to create a user-friendly system administrators
manual.  

It had a lot of great features
 - a hierarchy based system for the protection of the confidentiality of
incident information
 - me ability to skip certain types of identity information to provide
trend analysis / statistics
 - templating systems for common incident types
 - templating system for computer registration, including capability to
describe defenses and types of data
 - robust contact information capability
 - ability for students to record compromises that they had experienced

jim

-----Original Message-----
From: Matthew Keller [mailto:kellermg () POTSDAM EDU] 
Sent: Wednesday, March 28, 2007 5:12 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Software for Tracking Security Incidents

RTIR http://bestpractical.com/rtir/

While not a commercial product, Best Practical will take your money for
support if you have too much of it.

On Wed, 2007-03-28 at 13:17 -0400, Brenda B Gombosky wrote:
> What is everyone using to track their incidents?  Does anyone know of 
> a commercial product?

--
Matthew Keller
Information Security Officer/Network Administrator Computing &
Technology Services State University of New York @ Potsdam Potsdam, NY,
USA http://mattwork.potsdam.edu/