Looking for Host Based IDS

From: Guy Fighel (GuyF@xpert.com)
Date: 12/17/01


From: Guy Fighel <GuyF@xpert.com>
To: focus-ids@securityfocus.com
Date: Mon, 17 Dec 2001 17:34:26 +0200

Hello,

Can someone recommend about a good Host Based IDS that looks for suspicious
operating system processes?
I need the ability to write a specific policy for specific system processes
and need that the IDS will report about any modifications.

I would appreciate your help,

Guy.


Quantcast