Re: Incident tracking database

On Wed, 2002-12-04 at 21:13, Holger Kipp wrote:
>
>
> Danny (Danny@drexel.edu) wrote:

There are certainly some very good ticket tracking systems, but all I have looked at appear to lack a couple of features that I want in a system for tracking incidents. (Possible exception is the one that comes with snortsnarf but it has other limitations).

The features are:
1/ the ability to log tickets directly from programs (preferably across the network) in a straight forward manner. 2/ the ability to produce standard emails from standard templates and stuff stored as part of the ticket. Eg. incident notification to sites. 3/ the ability to add things like whois lookups that extract information and add it to the ticket which can then be used in 2.

I'd be delighted if I've missed something and the perfect system is really out there.

I have my own system that fulfills these requirements but is otherwise very rude and crude. I would love to marry its functionality into a "proper" call tracking system.

-- 
Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand

"It aint necessarily so"  - Gershwin


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com