.

Incident Reporting

<<

chrisbdaemon

Newbie
Newbie

Posts: 9

Joined: Wed Nov 07, 2007 1:05 am

Post Mon Oct 20, 2008 11:37 am

Incident Reporting

Hello, I was wondering what the steps would be once you discover a botnet.  In the USA is there an agency to report it to that would actually make an effort to investigate and pursue to botmaster or is it more of the kind of thing that gets reported, entered into statistics and forgotten about?
<<

LSOChris

Post Mon Oct 20, 2008 1:22 pm

Re: Incident Reporting

probably the latter... but the US CERT might be a place to start
<<

geekyone

User avatar

Full Member
Full Member

Posts: 180

Joined: Fri Oct 26, 2007 12:45 pm

Location: Peoria, IL

Post Mon Oct 20, 2008 4:21 pm

Re: Incident Reporting

http://www.shadowserver.org This organization is a good place to start.  It is run by volunteer Info Sec specialists.  They track and analyze bot nets.  They also coordinate with the proper agencies, US and International, to get the bot nets shutdown when they have gathered enough information.
CISSP, CEH, GPEN, GCIH, GCFA
<<

timmedin

User avatar

Sr. Member
Sr. Member

Posts: 469

Joined: Thu Feb 05, 2009 11:18 pm

Post Thu Feb 19, 2009 10:05 am

Re: Incident Reporting

The FBI had operation Bot-Roast. Googling that and following the links took me from the FBI site to http://www.ic3.gov/
Might want to report them there.
twitter.com/timmedin | http://blog.securitywhole.com
<<

RoleReversal

User avatar

Hero Member
Hero Member

Posts: 928

Joined: Fri Jan 04, 2008 8:54 am

Location: UK

Post Sat Feb 21, 2009 8:51 am

Re: Incident Reporting

Might be worth passing the info to the SANs Internet Storm Centre. If they aren't able to look direct they should be able to put you in contact with the right people.

Return to Incident Response

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software