[Dshield] IDS Analysts

[CunningPike]

Johannes,

How do we persuade you to bring the course to Vancouver, BC? :-)

A.

Johannes Ullrich wrote:
>> There is no value in having an Analyst that can just read alert
>> messages.
> 
> Which is some way is addressed by sending your analysts to the  
> "Intrusion Detection in Depth" class :-).
> Teaching it this week in San jose (starting in an hour or so). Not to  
> make this a commercial for the course, but what you are saying is the  
> exact premise of the course. Its less about how to turn a knob on some  
> IDS, but about understanding TCP/IP.
> 
> For more details see:
> http://www.sans.org/training/description.php?tid=510
> 
> 
> 
> 
> ---------
> SANS 2008 - Orlando, FL; 41 courses, April 18-25
> http://www.sans.org/info/19686
> 
> 
> 
> 
> 
> 
> 
_________________________________________
SANS Security 2008 in New Orleans!! January 11-19 2008. Why freeze up 
north if you can be in New Orleans.  http://www.sans.org/info/15826