[unisog] FRISK/IR RC1 Released
four at gwu.edu
Tue Apr 12 21:46:26 GMT 2005
Last week I gave a talk at the Educause Sec05 conference entitled "Modern
Incident Response Tools and Techniques". During this talk I released a
tool that I have been working on for the last few months called FRISK (the
Forensic Response and Incident Support Kit). Since it seemed to have a
good reception I thought I would share the release with the general
university security community. Here is a brief synopsis of its features:
FRISK is designed to facilitate the process of incident response in a
University or large enterprise. It is designed to be run on a host by
personnel of any skill level. Here are the key features:
Flexible HTML Template-Driven Output System
Secure Uploading of Results to a Central Location
Robust Plugin Architecture
Forensically Sound and Fully Automated (Never a write to local disk unless
forced - can be run from CDROM)
Open Source, Perl Based
Perl (or any other installation) not required on the host
Clean Code and easily extensible....
FRISK helps your enterprise perform live incident response more quickly,
and helps you, the security professional focus on what is important - the
While I do realize that there are other tools out there, none that I have
seen are designed to be as extensible and customizable as FRISK. My goal
is to build a tool with a community like Nessus or Snort for incident
response, driven by community contributions of plugins, so that we, as a
university community, can easily stay abreast of new threats.
The current version of FRISK supports only Windows-based platforms.
However, it is a primary goal of the project to support UNIX/Linux
platforms in the near future.
The release has some documentation, and includes a Perl distribution so
that you can get up and running quickly and easily. Please post any and
all questions to the relevant FRISK project forums.
Thank you very much,
John "Four" Flynn
Information Security Engineer
Intrusion and Forensic Specialist
Information Systems and Services
The George Washington University
More information about the unisog