System Security Audits

From: Peteris Krumins (newsgroups_at_lf.lv)
Date: 11/28/03

  • Next message: Robert E. Lee: "RE: Heavyweight Network Mapping Tools" 
    Date: Sat, 29 Nov 2003 00:00:33 +0200
To: pen-test@securityfocus.com

     Hello,

      I have a question about doing system (Windows) security
      audits.
      By system security audits I mean things like checking if computer
      is free of malware, trojans, viruses, if user has appropriate
      permissions (not too high or to say if user has restrictive
      permissions) etc.
      
      I have a couple of ideas which i could use, one is to create
      an universal CD with all the stuff needed. Everything is on the
      CD, nothing will be installed on the client's computer.
      The Audit Team just puts CD in, runs applications and that's it.

      The other is to bool from a CD on the client's computer
      which would bring us to some different environment (probably
      linux). As booted mount the filesystems and do all the
      audit stuff from such environment.

      Or, please, suggest any other methods that could be used.

    P.Krumins

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: Robert E. Lee: "RE: Heavyweight Network Mapping Tools"

    Relevant Pages

    • Re: System Security Audits
      ... Security's Auditing Tools and security templates. ... > By system security audits I mean things like checking if computer ... > permissions (not too high or to say if user has restrictive ...
      (Pen-Test)
    • RE: System Security Audits
      ... Trojans/Viruses etc. are constantly changing things. ... Subject: System Security Audits ... permissions (not too high or to say if user has restrictive ... audit stuff from such environment. ...
      (Pen-Test)