Forensics CD (was: Re: Strange Folder

["Meritt James" <meritt_james () bah com>]

REAL good suggestion!  Any specific recommendations as to what should be
on the CD?

Jim

Neil Dickey wrote:

> It's a good idea to have a kit of such tools on a read-only
> CD in advance of an incident like this, so that you have
> tools you know you can trust -- that haven't been trojanned
> -- ready to use.  It's rather like the instructions in a
> snake-bite kit.  You want to be familiar with them *before*
> Mr. Snake has his way with you.

-- 
James W. Meritt CISSP, CISA
Booz | Allen | Hamilton
phone: (410) 684-6566

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com