RE: Standardized Reporting

From: Brooke, O'neil (EXP) (o'neil.brooke@lmco.com)
Date: 08/15/02 

Date: Thu, 15 Aug 2002 16:35:43 -0400
From: "Brooke, O'neil (EXP)" <o'neil.brooke@lmco.com>
To: incidents@securityfocus.com

Hello,

        Since last night's post, I've received several responses both on and
off list. Every single one of them was positive and/or supportive of the
concept. So I'm going to go ahead with the idea of developing a standardized
report. Right now I have a few objectives in mind for this report:

        + A generic report that can be used to document virtually any
computer incident investigation.
        + Document a methodical approach to the incident investigation.
(Some of the responses I've had expressed an interest in the checklist
because they were not entirely aware of the sequence of events that should
go into an investigation.)
        + Document both generic and private information, however, do this in
such a way that the private information can quickly and easily be stripped
from the report. If we start to use this form, it does not make sense to
document in one way for the incidents list and another way for your
management structure.
        + Operating System specific sections. We could make the form
operating system independant, but then we lose a great opportunity for
providing newcomers a practicle how-to investigate and incident.

        If anyone else has other objectives they would like a report like
this to satisfy, please, either send them to me or post them to the list.

O'Neil.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

Relevant Pages

  • Re: Langkawi incident will destroy tourism
    ... Well since this incident has been widely reported I like the reply from the ... Kedah MB who claims he did not get a report on it. ... Mr and Mrs Barnhart are not even Muslims. ... What has Malaysia become when there are such ignorant and misguided? ...
    (soc.culture.malaysia)
  • Gurus: Report Design Issue ?s
    ... I have a report with a kind of weird design I've been asked to do. ... (Production area). ... contamination in main slurry input ... Incident #4327 5/8/2007 Water Leak detected above Wrapper machine #2 ...
    (microsoft.public.access.reports)
  • RE: Gurus: Report Design Issue ?s
    ... and the report runs 650% better now. ... (Production area). ... contamination in main slurry input ... Incident #4327 5/8/2007 Water Leak detected above Wrapper machine #2 ...
    (microsoft.public.access.reports)
  • UFO damages wind turbine?
    ... This report from the Telegraph.co.uk website might be of interest. ... The incident it describes could provide an interesting 'ufology' case ... Wind turbine destroyed after 'octopus UFO' seen in sky ... a wind turbine was destroyed in mysterious circumstances. ...
    (uk.philosophy.humanism)
  • RE: Gurus: Report Design Issue ?s
    ... probably group by some field value and place explanations in a group footer. ... I have a report with a kind of weird design I've been asked to do. ... (Production area). ... Incident #4327 5/8/2007 Water Leak detected above Wrapper machine #2 ...
    (microsoft.public.access.reports)
Quantcast