Re: Replacing antivirus soft with a real IDS/IPS



Like the concept of Core Force but haven't had any success with it. Have
installed on it on two Windows XP machines, both fully patched and
up-to-date. First box crashed with blue screen of death, something I
haven't seen in a long time with XP. Second box (my home box) went into a
reboot loop; had to use Safe Mode and whack Core Force to get up again.
Hope the next version is stable because, as I said, I like the concept...

js



Albert Gonzalez
<albertg@xxxxxxxx
m> To
carlopmart <carlopmart@xxxxxxxxx>
12/10/2005 02:39 cc
PM focus-ids@xxxxxxxxxxxxxxxxx
Subject
Re: Replacing antivirus soft with a
real IDS/IPS










CL,

You might want to take a look at coreForce[1].


>From their "About" page.

CORE FORCE can be used to:
- Protect your computer from compromises by worms, virus and email-borne
malware

- Prevent your computer from being used as a staging point to amplify
attacks and compromise others

- Prevent exploitation of known bugs in the operating system and
applications running on your computer

- Prevent exploitation of unknown bugs (0-day) in the operating system
and applications running on your computer

- Detect and prevent execution of adware, spyware, trojan horses and
other malware on you computer

HTH,
Albert Gonzalez

[1] http://force.coresecurity.com


On 12/6/05, carlopmart <carlopmart@xxxxxxxxx> wrote:
> Hi all,
>
> I am going to setup a testing lab with several windows XP virtual
> machines. My pourpose is to do some tests with HIDS/IPS software for
> windows and not to use antivirus software. Can you recommends me some
> HIDS software for windows ( free software if it is possible)?.
>
> And another question, will windows survive to several attacks
> (virus, trojans, etc) without using antivirus software ??? Have anyone
> tryied this??
>
> Thank you very much and sorry for my bad english.
>
> --
> CL Martinez
> carlopmart {at} gmail {d0t} com
>



--
"Success comes to the person who does today, what you are thinking of
doing tomorrow."

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------



============================================
STATEMENT OF CONFIDENTIALITY

The information contained in this electronic message and any attachments to
this message are intended for the exclusive use of the addressee(s) and may
contain confidential or privileged information. No representation is made
on its accuracy or completeness of the information contained in this
electronic message. Certain assumptions may have been made in the
preparation of this material as of this date, and are subject to change
without notice. If you are not the intended recipient, you are hereby
notified that any dissemination, distribution or copying of this e-mail and
any attachment(s) is strictly prohibited.

Please reply to the sender and destroy all copies of this message and any
attachments from your system.


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
------------------------------------------------------------------------



Relevant Pages

  • Re: Core Force
    ... ich habe dann mal in VMWARE eine WIndows XP Professionell Maschine ... Danach habe ich die CORE FORCE installiert und nur die Standardeinstellungen ... unter einem normalen Benutzer aufgerufen. ... Dann habe ich mal beim Hintergrund "Aktualisieren" ...
    (de.comp.security.firewall)
  • Re: Replacing antivirus soft with a real IDS/IPS
    ... CORE FORCE can be used to: ... - Protect your computer from compromises by worms, ... > windows and not to use antivirus software. ... will windows survive to several attacks ...
    (Focus-IDS)
  • Re: Port freigeben
    ... CORE FORCE is the first community oriented security solution for personal ... CORE FORCE is free and provides a comprehensive endpoint ... security solution for Windows 2000 and Windows XP systems. ...
    (microsoft.public.de.german.windows.server.networking)
  • Re: Replacing antivirus soft with a real IDS/IPS
    ... Considering the costs of AV for an enterprise, getting rid of it can be quite a substantial savings which can be funding for better overall security support. ... I am going to setup a testing lab with several windows XP virtual ... Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)
  • RE: syslogs for windows
    ... Subject: syslogs for windows ... I'm in need of a syslog server running on Windows, ... with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)