What Gu Zheng says is correct. However, when you work for a small
organization you might not have the resources to build a security team - it
is expensive. So in that case, some of your more knowledgeable sysadmins or
networking guys might be able to help out.
In any case, read this:
http://www.sans.org/y2k/contacting.htm
-n
-----Original Message-----
From: Gu Zheng [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 12, 2000 1:18 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: How to investigate ?
You must have a security team!
You must have a Incident Response Team/Incident Handling Team
You must have Intrusion Detention Systems Based on "Network/Host"
these help to you to run a forensic analyst, and correct your problems.
You must know alot of your infrastructure... (A LOT)(point by point).
Don't forget use tracking systems.
See you
Gu Zheng
(the Musician)
>From: "Alexandre" <[EMAIL PROTECTED]>
>To: "Firewalls" <[EMAIL PROTECTED]>
>Subject: How to investigate ?
>Date: Tue, 12 Sep 2000 08:33:17 -0300
>
>How to investigate about a intruder ??? How I can get them ?
>
>-------------------------------------------------
>Alexandre de Oliveira
>
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]