What Gu Zheng says is correct.  However, when you work for a small
organization you might not have the resources to build a security team - it
is expensive.  So in that case, some of your more knowledgeable sysadmins or
networking guys might be able to help out.  

In any case, read this:
http://www.sans.org/y2k/contacting.htm

-n

-----Original Message-----
From: Gu Zheng [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 12, 2000 1:18 PM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: How to investigate ?



You must have a security team!
You must have a Incident Response Team/Incident Handling Team
You must have Intrusion Detention Systems Based on "Network/Host"
these help to you to run a forensic analyst, and correct your problems.

You must know alot of your infrastructure... (A LOT)(point by point).

Don't forget use tracking systems.

See you

Gu Zheng
(the Musician)

>From: "Alexandre" <[EMAIL PROTECTED]>
>To: "Firewalls" <[EMAIL PROTECTED]>
>Subject: How to investigate ?
>Date: Tue, 12 Sep 2000 08:33:17 -0300
>
>How to investigate about a intruder ??? How I can get them ?
>
>-------------------------------------------------
>Alexandre de Oliveira
>
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to