[Intrusions] Incident Tracking Software

[David Taylor]

Hi all,

I hope this list would be the right place to send this to.  I figure we all
deal with incidents on a daily basis and I am wondering how some of you keep
up with everything.

We currently don't have any software that we use that is specific to
incident tracking and are finding it is difficult to keep up with everything
in an organized manner.  Especially when we do campus-wide scans or if a
worm breaks out. We do use a software application called Remedy which is a
pretty good help desk application but we mainly use this to track DMCA
violations and request network port traces/disconnects (cause networking
says we have to use it to get work done).

Anyway, information security incidents don't seem to fit in regular help
desk software.  If any of you are using something that is working for you we
would love to hear about it.

Thanks in advance!


==================================================
David Taylor //Sr. Information Security Specialist
University of Pennsylvania Information Security 
Philadelphia PA USA
LTR at ISC.UPENN.EDU               (215) 898-1236
http://www.upenn.edu/computing/security/
================================================== 

SANS - The Twenty Most Critical Internet Security Vulnerabilities 
http://www.sans.org/top20/