The art of responding to incidents in an organized and thoughtful manner.

learn more… | top users | synonyms (2)

0
votes
1answer
124 views

Is there a Snort rule that equates to “something suspicious flagged from a client side application?”

The reasoning is what if an enterprise monitors snort alerts more-so than say syslog. Is there a specific pre-defined alert for 'client side app says something fishy is going on'?
-1
votes
1answer
21 views

Adobe PSIRT Average Response Time [closed]

Anyone have any experience in contacting the Adobe Product Security Incident Response Team (PSIRT)? I sent in an exploit that I found two weeks ago and I have not heard from them since. Would they ...
-1
votes
1answer
466 views

Extremely suspicious phone call — what to do? [closed]

Two days ago, I received a call. Someone with a female, possibly asian voice asked "are you using your computer in internet right now." I said "yes", then asked "who are you?". At this point, they ...
-2
votes
3answers
446 views

Why bother with attack detection?

The question below goes from a wrong assumption that attacker is able to spoof IP when making HTTP connection. But attacker isn't able to spoof IP if he doesn't have direct access to connection ...
-2
votes
0answers
5 views

Looking for a good wireless access point incident response scenario for PCI review. Any suggestions?

Looking to build a wireless access point scenario to test out our Incident Reponse planning.