<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/'><id>tag:blogger.com,1999:blog-7652481.post5649534860313256076..comments</id><updated>2007-05-11T15:57:37.345-04:00</updated><category term='MySQL'/><category term='Tor'/><category term='NSM'/><category term='dns'/><category term='Snort'/><category term='book review'/><category term='Sguil'/><category term='apt'/><category term='hacking'/><category term='Perl'/><category term='Events'/><category term='WTF?'/><category term='OSSEC'/><category term='management'/><title type='text'>Comments on Infosec Potpourri: Forensics in the Enterprise</title><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://blog.vorant.com/feeds/5649534860313256076/comments/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/7652481/5649534860313256076/comments/default'/><link rel='alternate' type='text/html' href='http://blog.vorant.com/2007/05/forensics-in-enterprise.html'/><author><name>David Bianco</name><uri>http://www.blogger.com/profile/09760835714791462863</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>2</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-7652481.post-2996490833603886071</id><published>2007-05-11T15:57:00.000-04:00</published><updated>2007-05-11T15:57:00.000-04:00</updated><title type='text'>Tim, that's why I specifically said that I'm &lt;b&gt;no...</title><content type='html'>Tim, that's why I specifically said that I'm &lt;B&gt;not&lt;/B&gt; shilling.  Honest!&lt;BR/&gt;&lt;BR/&gt;Seriously, I haven't seen any pricing info, but I'm prepared to believe that it costs some big dough if you buy all those packages.  Still, it may be worthwhile for some organizations if it saves them a significant amount of time or provides new useful capabilities.&lt;BR/&gt;&lt;BR/&gt;Personally, I think that the time savings could be quite substantial if you spend a lot of time doing forensic analysis (less time spent opening up computers and acquiring drive images) or you have to track a lot of classified or personally identifiable information.&lt;BR/&gt;&lt;BR/&gt;But of course, the $$$ isn't one I can really decide for you.  Each organization has to figure that out for themselves.  But I am happy that the options are available.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/7652481/5649534860313256076/comments/default/2996490833603886071'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/7652481/5649534860313256076/comments/default/2996490833603886071'/><link rel='alternate' type='text/html' href='http://blog.vorant.com/2007/05/forensics-in-enterprise.html?showComment=1178913420000#c2996490833603886071' title=''/><author><name>David Bianco</name><uri>http://www.blogger.com/profile/09760835714791462863</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.vorant.com/2007/05/forensics-in-enterprise.html' ref='tag:blogger.com,1999:blog-7652481.post-5649534860313256076' source='http://www.blogger.com/feeds/7652481/posts/default/5649534860313256076' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-2136160136'/></entry><entry><id>tag:blogger.com,1999:blog-7652481.post-4823733038093635043</id><published>2007-05-11T15:36:00.000-04:00</published><updated>2007-05-11T15:36:00.000-04:00</updated><title type='text'>It sounds like you are shilling for the vendor!  E...</title><content type='html'>It sounds like you are shilling for the vendor!  Encase Enterprise can be very expensive, try - and then use experience to evaluate other options.  IT + legal + eDiscovery + enterprise backup + network security = big $$$.  Thanks to the profitability of eDiscovery, Encase has really expanded and now reaching into a lot of corners...&lt;BR/&gt;&lt;BR/&gt;Ciao,&lt;BR/&gt;&lt;A HREF="http://torque.gig8.com" REL="nofollow"&gt;tim&lt;/A&gt;</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/7652481/5649534860313256076/comments/default/4823733038093635043'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/7652481/5649534860313256076/comments/default/4823733038093635043'/><link rel='alternate' type='text/html' href='http://blog.vorant.com/2007/05/forensics-in-enterprise.html?showComment=1178912160000#c4823733038093635043' title=''/><author><name>Tim</name><uri>http://www.blogger.com/profile/18223477475853940809</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.vorant.com/2007/05/forensics-in-enterprise.html' ref='tag:blogger.com,1999:blog-7652481.post-5649534860313256076' source='http://www.blogger.com/feeds/7652481/posts/default/5649534860313256076' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-2146029449'/></entry></feed>
