Re: Looking for Host Based IDS

From: Talisker (talisker@networkintrusion.co.uk)
Date: 12/17/01 

From: "Talisker" <talisker@networkintrusion.co.uk>
To: "Guy Fighel" <GuyF@xpert.com>, <focus-ids@securityfocus.com>
Date: Mon, 17 Dec 2001 21:07:13 -0000

Guy
There are loads out there, some good, some not so good. I have tried to
provide a few salient details about every one of them. Take a look and if
I'm missing any please let me know
http://www.networkintrusion.co.uk/HIDS.htm

-andy
http://www.networkintrusion.co.uk
----- Original Message -----
From: "Guy Fighel" <GuyF@xpert.com>
To: <focus-ids@securityfocus.com>
Sent: Monday, December 17, 2001 3:34 PM
Subject: Looking for Host Based IDS

> Hello,
>
> Can someone recommend about a good Host Based IDS that looks for
suspicious
> operating system processes?
> I need the ability to write a specific policy for specific system
processes
> and need that the IDS will report about any modifications.
>
> I would appreciate your help,
>
> Guy.

Quantcast