Orion Incident Response Live CD
It’s important to note that the owners of these sites often discourage automated submissions since these tools are often also used by attackers. For this reason, the analyst cannot rely on these automated tools alone.
Incident response and analysis work are not truly done until a report has been written. Orion provides report templates and a workflow to guide the responder to create the reports at the proper times. Here is a list of the various templates included currently in Orion:
Incident Analysis Report
Incident Activity Log
Incident Responder Task List