tag:blogger.com,1999:blog-6447283518071683105.post1668748086199546150..comments2023-04-02T10:17:04.631-04:00Comments on Forensic Incident Response: Peer Reviewhogflyhttp://www.blogger.com/profile/00741773109962883616noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-6447283518071683105.post-39279694392644056062007-03-30T16:55:00.000-04:002007-03-30T16:55:00.000-04:00You know it's actually quite frustrating that we d...You know it's actually quite frustrating that we don't have a taxonomy. I've read a few of them including the CERT doc for a common language for Computer Security Incidents and it's so old that it's useless now.hogflyhttps://www.blogger.com/profile/00741773109962883616noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-90043523130274880652007-03-28T20:25:00.000-04:002007-03-28T20:25:00.000-04:00Guys, Great comments, and great post. I think wha...Guys, <BR/><BR/>Great comments, and great post. I think what we're seeing now for IR/CF is what we saw in the late '90s with pen testing...everyone and his brother with a hacked ISS Internet Scanner license and a couple of freeware tools was a "pen tester", or an "ethical hacker" (oxymoron, I know). <BR/><BR/>I've been saying for a while that we don't have consistency in terminology...lawyers H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-71666274734128484782007-03-25T23:58:00.000-04:002007-03-25T23:58:00.000-04:00Mark,That's why I sometimes like being the little ...Mark,<BR/>That's why I sometimes like being the little guy. I can actually focus on what matters (the science) and let some bureaucrat worry about "the bad guys" getting this information. It'd be nice to have the big guys budget, but that's another story.<BR/><BR/>What those who are unwilling to share fail to realize is that this information is out there already. The bad guys and the other side hogflyhttps://www.blogger.com/profile/00741773109962883616noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-11516720400988918912007-03-25T22:19:00.000-04:002007-03-25T22:19:00.000-04:00Excellent post. I totally agree with everything t...Excellent post. I totally agree with everything that you are saying. Now I think part of the problem is that there are so many people out there that do not want to publish what they do so that the "other" side or "bad guys" does not get their hands on it. It goes along with having a checklist which is what the procedure is actually. Something else to think about to is that when you publish Mark McKinnonhttps://www.blogger.com/profile/06597353327384503465noreply@blogger.com