Incident Response

Incident Response Team Resources

Although there is a full listing of all FIRST teams in Appendix A, a few teams deserve special mention here. These are some of the teams that are resources to either the general public or a large portion of it, and their web sites are generally packed with information useful to just about anyone in the security business:

CERT/CC, http://www.cert.org

Viewed by most as being the first organized, dedicated public resource incident response team in existence, the CERT at Carnegie Mellon University maintains a web site with loads of useful information including their ongoing security advisories and research reports.

FedCIRC, http://www.fedcirc.gov

Formed in the early 1990’s, the FedCIRC is an incident response resource that is available to the entire U.S. Federal Government by way of the General Services Agency.

CIAC, http://ciac.llnl.gov or http://www.ciac.org

Among the early U.S. Government adopters of incident response team is the Department of Energy’s Computer Incident Advisory Capability (CIAC) team. Although it principally serves the Department of Energy, its web site has plenty of information that is of general interest, including one of the best virus hoax repositories in existence.

DoD-CERT, http://www.cert.mil

The U.S. Department of Defense’s counterpart of the CIAC team is the DoD-CERT. It too runs a web site that has information likely to be of interest outside of the DoD community.

AusCERT, http://www.auscert.org.au

Modeled after ...