Norton Creek Endpoint & Network Security LLC
Terms for using this site
These terms cover the public website: the pages, the published rules and runbooks, and the recovery calculator. Paid work is governed by a separate signed engagement letter, and where the two disagree, the engagement letter wins.
Who runs this site
Norton Creek Incident Triage Lab is the trading name of Norton Creek Endpoint & Network Security LLC, a Virginia limited liability company at 11951 Freedom Dr, Suite 420, Reston, VA 20190. We are independent and have no connection to Gen Digital Inc., NortonLifeLock or Norton-branded software. Nothing on this site is an offer of support for those products.
What the published material is
The firewall rules, Sysmon baselines, segmentation tables and field notes describe what we commonly deploy for small organizations. They are a starting point for a qualified administrator, not a configuration to paste into production unchanged. Networks differ, vendors change port requirements, and a rule that is safe in one clinic may stop an imaging modality in another. Test in a maintenance window and keep a rollback.
The RTO and blast-radius calculator uses the stated assumptions to produce planning estimates. Actual recovery depends on things no calculator sees, such as whether your images are current or your backups contain what you think they do. We do not promise any recovery time on the basis of its output.
Reuse
You may use the rules, checklists and runbook steps inside your own organization or for your clients, with or without credit. Please do not republish the field notes as your own writing or present our name in a way that implies we reviewed or approve your environment.
Testing only what you own
Some material here describes attacker techniques so defenders can recognize them. Use it only on systems you own or are authorized in writing to test. Unauthorized access is a crime under the Virginia Computer Crimes Act (Va. Code § 18.2-152.1 and following) and the federal Computer Fraud and Abuse Act, and we will not assist anyone acting outside that line.
No client relationship from reading
Reading this site or emailing us does not make you a client and does not create any duty for us to act. A client relationship begins only when both parties sign an engagement letter and an authorization naming the systems in scope.
Liability
The site is provided as it stands. To the extent Virginia law allows, Norton Creek Endpoint & Network Security LLC is not liable for losses arising from use of the free material or calculator, including downtime, data loss or a configuration change made on the strength of a published example. This limit does not apply to anything the law does not allow us to exclude.
Governing law
These terms are governed by the laws of the Commonwealth of Virginia. Any dispute about them belongs in the state or federal courts serving Fairfax County, Virginia.
Reporting a vulnerability in this site
If you find a security issue on norton-tech-support.com, write to [email protected]. Good-faith research that avoids privacy harm and service disruption is welcome, and we will not pursue legal action over it. Our contact details are also published at /.well-known/security.txt.