Incident Response

Mailing Lists and Newsgroups

Long before the World Wide Web, the Internet was a thriving community of people using mailing lists and newsgroups to openly and freely exchange ideas and opinions. That community is still thriving and can be one of the most useful sources of information on the planet. Note, though, that along with the unprecedented capability to communicate with people across the world comes a downside. Just as in any conversation among people, the information can be incorrect, biased by personal opinion, or irrelevant. While the benefits of these discussions can far outweigh that downside, proceed with due caution:

Bugtraq, http://www.securityfocus.com

One of the pioneers in the so called “full disclosure” discussion groups, bugtraq has been providing an open forum for discussing security vulnerabilities and techniques for many years.

Forensics, http://www.securityfocus.com

Another of several high-quality email discussion groups hosted by Security Focus is their forensics group, which specializes in discussions related to physical and logical forensic analysis techniques.

Incidents, http://www.securityfocus.com

Yet another discussion group hosted by Security Focus, the incidents group is chartered to provide a forum for discussing ongoing system intrusions and their responses.

NTBugtraq, http://www.ntbugtraq.com

Originally envisioned as a counterpart to the bugtraq mailing list, the NTBugtraq list specializes in security issues related to Microsoft Windows NT ...