http://csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf
800-61 is the Incident Handling guide and if you want more information feel
free to ping me directly
Jerry
[EMAIL PROTECTED]
----- Original Message -----
From: "Vijay K" <[EMAIL PROTECTED]>
To: "jimmy wong" <[EMAIL PROTECTED]>; <[email protected]>
Sent: Friday, September 07, 2007 2:40 PM
Subject: Re: IDS Incident Escalation Procedure
Instead of re-inventing the wheel, suggest browse
through NIST publications.
Cheers
Vijay
--- jimmy wong <[EMAIL PROTECTED]> wrote:
Hi There,
Hi,
Would appreciate if anyone can share what should we
include to formulate a IDS/IPS incident escalation
procedure.
Thanks,
Jim
____________________________________________________________________________________
Yahoo! oneSearch: Finally, mobile search
that gives answers, not web links.
http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------
____________________________________________________________________________________
Yahoo! oneSearch: Finally, mobile search
that gives answers, not web links.
http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------