ClearResponse

From: Dominik Kruk (dominik.kruk@pckurier.pl)
Date: 08/21/02 

Date: Wed, 21 Aug 2002 23:33:54 +0200
To: focus-ids@securityfocus.com
From: Dominik Kruk <dominik.kruk@pckurier.pl>

Hello,
I'd like to know your opinion about Psionic's ClearResponse. How
ClearResponse is doing its investigations on hosts? In their whitepaper
stays that ClearResponse is using "existing authentication infrastructure".
Whats that? What OSes are supported? How this process goes? How are log
files copied (which protocol) into safe location? Next thing is how
ClearResponse is getting IDSes reports about atacks? Any details are
welcome. Is this software of any use?

Dominik