OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: What to do if they ignore you

From: Kyle Maxwell (krmaxwellgmail.com)
Date: Thu Apr 14 2005 - 15:44:57 CDT

On 4/14/05, Harlan Carvey <keydet89yahoo.com> wrote:
> > Just a thought, but maybe a letter from one of your
> > client's legal
> > counsel (something like "intrusion attempts from
> > your network have
> > continued despite multiple attempts to warn and we
> > are forced to
> > assume this is intentional)
>
> I'm not sure I see your logic in equating "probes"
> (from the OP) to "intrusion attempts"...

The idea is to get their attention with a "vigorous defense" (or
whatever the appropriate legalese is) rather than be highly specific
-- consider who would actually be reading the letter. You're
completely correct, port scans aren't intrusion attempts (though they
could potentially be precursors), and the language (such as it was)
really was just off the top of my head. I assume that a real lawyer
would have a much better idea of what should go into such a letter
than I would, anyway.

--
Kyle Maxwell
[krmaxwellgmail.com]

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------