Re: incident log software

[Steve <steve () SECURESOLUTIONS ORG>]

Sounds like a cool idea.  BUT, my worry would be being accused of altering
notes etc etc.  At least if you use the old fashioned bound notebook (bound
so you can tell if a page has been removed) it is harder to alter or be
accused of altering data.

Just my $.02 (canadian yet, so what is it really worth?)

------------------------------------------------------------------------

Steve Manzuik                                   Calgary, Alberta, Canada
Moderator - Win2K Security Advice               (403)660-2997

Security Analyst - Bindview RAZOR Team
smanzuik () razor bindview com
http://razor.bindview.com

* - The opinions expressed in this email are mine, and mine alone.  They - *
* - do not reflect those of my employer or anyone else for that matter.  - *

------------------------------------------------------------------------

> -----Original Message-----
> From: Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]On
> Behalf Of The Picard
> Sent: Monday, October 16, 2000 9:54 PM
> To: INCIDENTS () SECURITYFOCUS COM
> Subject: incident log software
>
>
> Hello,
>
> I was wondering if anyone has seen any utility designed to assist taking
> down notes during an incident investigation. A software version
> of a smarter
> notebook, if you want, something that would do automatic time stamping of
> entries, perhaps some note correlation etc. Yes, I know, a
> classic notebook
> would do it but with so many Palms around, maybe someone wrote a
> small app.
>
> Thanks!