PaulDotCom mailing list archives

Re: Incident Response


From: Mike Patterson <mike () snowcrash ca>
Date: Wed, 30 Jun 2010 18:06:20 -0400

On 10-06-30 12:05 PM, Craig Freyman wrote:
When the AV flags a virus, what steps should you take to handle the
situation?

I would assume the following would be important to figure out:
[...]
   - ??

First and foremost: is this a false positive?

Other than that, Josh Little's response is good.

Mike
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


Current thread: