RE: Forensics Methodology

[latyzenhaus () anl gov (Tyzenhaus, Laurie A.)]

Try looking at the SANS web site.  Went to the Conference in Oct & it was
great.  The Incident Handling publication is very thorough.

Computer Security Incident Handling: Step-by-Step

 http://www.sans.org/newlook/publications/incident_handling.htm

Laurie Tyzenhaus

-----Original Message-----
From: Subba Rao
To: IDS Discussion List
Sent: 12/4/99 7:00 AM
Subject: IDS: Forensics Methodology

------------------------------------------------------------------------

Is there any forensics methodology that is recommended after IDS/NIDS
reports
about an intrusion or missuse?

Thank you.

Subba Rao
subb3 () ibm net
http://pws.prserv.net/truemax/