Re: Host based IDS Reports
From: Mike Lyman (mlyman-security_at_comcast.net)
Date: 12/23/03
- Previous message: Teicher, Mark (Mark): "Host based IDS Reports"
- In reply to: Teicher, Mark (Mark): "Host based IDS Reports"
- Next in thread: Teicher, Mark (Mark): "RE: Host based IDS Reports"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: focus-ids@securityfocus.com Date: Mon, 22 Dec 2003 22:59:04 -0600
On Sat, 2003-12-20 at 14:05, Teicher, Mark (Mark) wrote:
> Thoughts, comments, rants, raves, suggestions for a geek who preaches
> from the corner soapbox.. :)
My old boss and I used to drive vendors nuts when they'd ask us how we
liked their reporting features and we'd tell them we didn't use them.
As long as the data was being reported to a database, we'd generate our
own reports, import to Excel and pretty them up from there. None of the
built in reports met our constantly changing needs so we relied on the
database.
We also stress SQL skills as one of our main requirements for new
members of the team. We had so much data available that everybody had to
be able to write ad-hoc queries in their sleep.
It may takes some skill to pretty them up but nothing beats being able
to generate exactly the info you need instead of relying on what
somebody else thinks you probably need.
-- Mike Lyman <mlyman-security@comcast.net> --------------------------------------------------------------------------- ---------------------------------------------------------------------------
- Previous message: Teicher, Mark (Mark): "Host based IDS Reports"
- In reply to: Teicher, Mark (Mark): "Host based IDS Reports"
- Next in thread: Teicher, Mark (Mark): "RE: Host based IDS Reports"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
