Re: Looking for formal definition of suspicious network activity events

From: Torbjorn.Wictorinat_private
Date: Thu May 31 2001 - 13:18:53 PDT

Next message: Jay D. Dyson: "RE: Penetration test report - your comments please?"

Previous message: Mike Ahern: "Automating Dumping of Passwords From NT Registry"
In reply to: Jostein S. Trondal: "Looking for formal definition of suspicious network activity even ts"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hello,

I think you can get some ideas from the IODEF and IDMEF work.
See http://www.terena.nl/task-forces/tf-csirt/ for relevant links.

Torbjörn Wictorin, Uppsala university

Next message: Jay D. Dyson: "RE: Penetration test report - your comments please?"
Previous message: Mike Ahern: "Automating Dumping of Passwords From NT Registry"
In reply to: Jostein S. Trondal: "Looking for formal definition of suspicious network activity even ts"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Jun 01 2001 - 13:05:44 PDT