RE: MS binary integrity baseline

From: wnorth (wnorth_at_verizon.net)
Date: 08/19/04

  • Next message: dave kleiman: "RE: MS binary integrity baseline" 
    To: "'Chris Conacher'" <chris_conacher@hotmail.com>, <focus-ms@securityfocus.com>
Date: Thu, 19 Aug 2004 13:52:23 -0700

    Tripwire performs file integrity checks as well as registry checks, I am not
    aware of a tool that Microsoft has that does this like rpm does for RedHat.
    Tripwire is great though and you can define specific rules like if the
    content of the file is expected to change but the permissions aren't etc.
    Awesome tool.

    -Wes

    > Is there anything that performs binary integrity checks for Windows OS
    such as rpm does for Redhat or apt does for Debian?

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: dave kleiman: "RE: MS binary integrity baseline"

    Relevant Pages

    • Re: hack attempt on my server...What do you do about this?
      ... for quick file transfers if you don't need a full blown ftp service. ... If you have tripwire run a report. ... If you don't have tripwire then you may be able to use rpm to compare ... the first lion thinks the last a bore. ...
      (Fedora)
    • RE: File Integrity Monitoring
      ... Tripwire should meet most people file integrity requirements, ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
      (Security-Basics)
    • Re: how to check what has done on a computer?
      ... >>copy of the tripwire database also goes into that hidden directory. ... tripwire over 'rpm -V' is quite simple. ... the databases are copied to two backup servers that don't offer ...
      (alt.os.linux)
    • Re: Rogue DHCP Lease... hacker?
      ... ]> The 'rpm -V' mechanism was originally meant to uncover user blunders. ... IF the md5 hash has changed, ... ]> an identical disk that is normally not installed). ... Tripwire does nothing more than rpm -V does. ...
      (alt.computer.security)
    • Re: Wire tripped
      ... tripwire ran at it's usual time and reported ... if you updated tripwire after doing the upgraded prelink probably ... > rpm gets compromised as well, through yum (yum erase tripwire; ... I believe you can use rpm to validate the files on your system. ...
      (Fedora)
    • Quantcast