diagnose compromise on NT

From: Ingersoll, Jared (jared@cswv.com)
Date: 07/22/02 

From: "Ingersoll, Jared" <jared@cswv.com>
To: incidents@securityfocus.com
Date: Mon, 22 Jul 2002 07:50:22 -0400

Does anyone know of any good tools that can be used on an NT 4.0 box to
(help) diagnose a system compromise? I've been playing around with inzider
with limited results.

Thanks,

Jared

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com