tag:blogger.com,1999:blog-9518042.post4875790455431541357..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: Artifact Repositories, part deuxUnknownnoreply@blogger.comBlogger4125tag:blogger.com,1999:blog-9518042.post-13694521028855037112008-01-31T13:41:00.000-05:002008-01-31T13:41:00.000-05:00Agreed.Agreed.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-4714761569831505182008-01-31T13:38:00.000-05:002008-01-31T13:38:00.000-05:00Yeah isn't that something? They all want to know ...Yeah isn't that something? They all want to know but don't want to invest resources to it. My opinion is without an RCA the job isn't complete.hogflyhttps://www.blogger.com/profile/00741773109962883616noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-23314843548284426282008-01-31T13:34:00.000-05:002008-01-31T13:34:00.000-05:00...management hasn't been convinced of the value o...<I>...management hasn't been convinced of the value of such an endeavor.</I><BR/><BR/>In many cases, you're right. However, my experience has been that there are times when, after the final report is done, mgmt will ask that question...albeit as an afterthought. However, part of the impetus for the post what that I've received about half a dozen emails stating something along the lines of "...my boss wants to know..."H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-57412983929348520732008-01-31T12:56:00.000-05:002008-01-31T12:56:00.000-05:00I know I'm looking at remote storage repositories....I know I'm looking at remote storage repositories. The apps I listed are on my hit list for upcoming work..as soon as I can get past a few blocking issues I'll get to them.<BR/><BR/>As far as RCA goes I find there is a regular struggle to devote the time to determine the root cause because management hasn't been convinced of the value of such an endeavor. All they commonly care about is the end result..and that's just a shame.hogflyhttps://www.blogger.com/profile/00741773109962883616noreply@blogger.com