Re: IDS Incident Escalation Procedure

["Jerry Dixon" <jerry () jdixon com>]

http://csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf

800-61 is the Incident Handling guide and if you want more information feel 
free to ping me directly

Jerry
jerry () jdixon com
----- Original Message ----- 
From: "Vijay K" <globevk () yahoo com>
To: "jimmy wong" <me1743 () yahoo com>; <focus-ids () securityfocus com>
Sent: Friday, September 07, 2007 2:40 PM
Subject: Re: IDS Incident Escalation Procedure


> Instead of re-inventing the wheel, suggest browse
> through NIST publications.
>
> Cheers
> Vijay
>
> --- jimmy wong <me1743 () yahoo com> wrote:
>
> > Hi There,
> >
> >
> >
> > Hi,
> >
> > Would appreciate if anyone can share what should we
> > include to formulate a IDS/IPS incident escalation
> > procedure.
> >
> >
> >
> >
> >
> > Thanks,
> >
> > Jim
> ____________________________________________________________________________________
> > Yahoo! oneSearch: Finally, mobile search
> > that gives answers, not web links.
> http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
> >
> ------------------------------------------------------------------------
> > Test Your IDS
> >
> > Is your IDS deployed correctly?
> > Find out quickly and easily by testing it
> > with real-world attacks from CORE IMPACT.
> > Go to
> http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> > to learn more.
> ------------------------------------------------------------------------
> >
>
>
>
>
> ____________________________________________________________________________________
> Yahoo! oneSearch: Finally, mobile search
> that gives answers, not web links.
> http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to 
> http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------