The best way to evaluate a denial of service (DoS) incident is to base it on the incident analysis that was previously done. From the analysis we had gathered valuable information and this is my evaluation. After getting complaints that the network was running slow I immediately started to do an incident analysis to find out what was happening (Tipton & Frause 2007). So, I decided to use the National Institute of Standards and Technology methodology to seek the answers. Using the Detection and Analysis step I started checking activities on the network and I came to realize that we are the victim of a denial of service attack. In other words someone was maliciously doing things to slow down our network. I discovered that several rules
