would recommend to go with ISS.

-Deepak

On Tue, Jul 22, 2008 at 9:21 AM, Ramki B Ramakrishnan <bramkie (at) gmail (dot) com [email concealed]> wrote:
> You can also look at Cisco Systems MARS, it has case management.
>
> http://www.cisco.com/go/mars
>
> Ramki
> -----
> Ramki B. Ramakrishnan
> Security Enthusiast
> GIAC:GSEC, CvA
>
>
> -----Original Message-----
> From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On
> Behalf Of Gleb Paharenko
> Sent: Tuesday, July 15, 2008 1:09 PM
> To: Brooks Garrett
> Cc: security-basics (at) securityfocus (dot) com [email concealed]
> Subject: Re: Online Incident Response Management
>
> Hi.
>
> Netforensics and IBM ISS has Incident management workflows. But in my
> opinion the papers signed by
> real people usually give much more weight and should duplicate key
> things in the incident. It is easier to work
> when incident management software can fetch reports from SEIM and
> therefore they often shipped together.
>
>
> 2008/7/14 Brooks Garrett <bg (at) brooksgarrett (dot) com [email concealed]>:
>> I'm looking for a way to bring my Incident Response SOP's online to
>> better document and control our Incidents. Are you guys currently
>> using any software for this purpose? I've looked at building a custom
>> Sharepoint site and also evaluated doing a Wiki. I'm really curious to
>> see what the rest of the industry is doing, so any input?
>>
>> --
>> Thanks!
>>
>> Brooks Garrett
>>
>
>
>
> --
> Best regards.
> Gleb Pakharenko.
> http://gpaharenko.livejournal.com
> http://www.linkedin.com/in/gpaharenko
>
>

[ reply ]