My next class:

Reporting firewall logs

Published: 2007-07-17. Last Updated: 2007-07-17 20:43:47 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)

We got a couple of users forwarding firewall logs to the handlers\at/sans.org e-mail address. While we appreciate logs, malware and other reports like it, please don't send automated log reports to handlers\at/sans.org. If you send logs, include some detail why you consider them unusual.

Please use DShield for automated log reporting (see http://www.dshield.org/howto.html ). Our handlers have access to the DShield database and regularly check it for unusual activity.

Thanks!

 

Keywords:
0 comment(s)
My next class:

Comments


Diary Archives