signature follow-up how-to doc

[twig les <twigles () yahoo com>]

Hey *,

I'm trying to get together a solid doc on how to
follow up on alerts.  I have my own routine that I
like to follow, but I'm interested in what you guys
do.  Part of this doc's purpose is to demonstrate how
useless our other IDS is since we don't have access to
its super-duper, top-secret signatures.

So if anyone has a list of steps they follow, heap
them on.  I can de-proprietary the doc when I'm done
and post it somewhere.

=====
-----------------------------------------------------------
Heavy metal made me do it.                        
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users