Incident Response Guidelines

Hello,

Thanks for all of your kind responses. I have just compiled short list books and sites that were recommended by some of you.

Sites for research

rr.sans.org.
cert.org
infosyssec.com
rsasecurity.com
www.e-secure-db.us/dscgi/ds.py/View/Collection-1940 www.e-secure-db.us/dscgi/ds.py/View/Collection-1450 honeypot.org
ciac.org/ciac/

www.ietf.org/rfc/rfc2350.txt
www.elytra.com/resources.htm
www.cis.ohio-state.edu/cgi-bin/rfc/rfc2196.html

Books to read

Incident Response: Investigating Computer Crime by Kevin Mandia and Chris Prosise
Cyber Foreniscs - Marcella/Greenfield
Handbook of Computer Crime Investigation - Casey Computer Forensics - Kruse/Heiser
Computer Forensics - Vacca
Security planning and disaster recovery by Maiwald and Sieglein. Incident Response by Van Wyk & Forno
Few of the SANS series books

Hope that helps everyone. I'll continue to post more info, if I find it. If you have more suggestions / recommendations, please drop me an email.

Again, thanks for the input.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

John Smithson.

>Hello,
>
>I'm about to start huge documentation phase on creating
>Incident Response Guidelines / Handling - including creating the structure,
>creating the Incident Response Team, documenting the guidelines per
>incidents - such as web server hacked, DOS attack, Virus Outbreak
>
>I need your help on pointing me to few good documents /
>books. Obviously, I have googled, and found good info. However, I may be
>missing some good information that you gurus have collected over time.
>
>Please any help would be greatly appreciated.
>
>Thanks,
>
>John Smithson
>