...
Handling: Tufts uses an incident handling workflow process that can be found here. Tufts uses a ticketing system, RT (request tracker), to track the progress through a workflow. In the future, Tufts will be phasing out RT in favor of Service-Now. ArcSight is also used in the handling process to help look up past network events and collect evidence.
What is this wiki all about?
This wiki is focused on helping you use ArcSight to prevent and handle security incidents.