Re: IDS Incident Escalation Procedure

http://csrc.nist.gov/publications/nistpubs/800-61/sp800-61.pdf

800-61 is the Incident Handling guide and if you want more information feel 
free to ping me directly

Jerry
[email protected]
----- Original Message ----- 
From: "Vijay K" <[email protected]>
To: "jimmy wong" <[email protected]>; <[email protected]>
Sent: Friday, September 07, 2007 2:40 PM
Subject: Re: IDS Incident Escalation Procedure


> Instead of re-inventing the wheel, suggest browse
> through NIST publications.
>
> Cheers
> Vijay
>
> --- jimmy wong <[email protected]> wrote:
>
>> Hi There,
>>
>>
>>
>> Hi,
>>
>> Would appreciate if anyone can share what should we
>> include to formulate a IDS/IPS incident escalation
>> procedure.
>>
>>
>>
>>
>>
>> Thanks,
>>
>> Jim
>>
>>
>>
>>
>>
> ____________________________________________________________________________________
>> Yahoo! oneSearch: Finally, mobile search
>> that gives answers, not web links.
>>
> http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
>>
>>
> ------------------------------------------------------------------------
>> Test Your IDS
>>
>> Is your IDS deployed correctly?
>> Find out quickly and easily by testing it
>> with real-world attacks from CORE IMPACT.
>> Go to
>>
> http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
>>
>> to learn more.
>>
> ------------------------------------------------------------------------
>>
>>
>
>
>
>
> ____________________________________________________________________________________
> Yahoo! oneSearch: Finally, mobile search
> that gives answers, not web links.
> http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to 
> http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------
>
>
> 


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------