Re: Detecting File Alteration

I dont recall if your original email required this to run on windows or *nix.

I've used samhain on *nix with no issues, not sure about windows.

http://www.la-samhna.de/samhain/

-off

On Thu, Aug 31, 2006 at 11:44:14PM -0400, Mister Dookie wrote:
Tripwire is awfully expensive for a small company... there must be
something in the freeware realm or at least something cheaper that
accomplishes the same thing as Tripwire.

On 8/31/06, Peter Marshall <petermmarshall@xxxxxxxxxxx> wrote:
Tripwire as well . . .

-----Original Message-----
From: Saqib Ali [mailto:docbook.xml@xxxxxxxxx]
Sent: Thursday, August 31, 2006 3:49 PM
To: Mister Dookie
Cc: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: Detecting File Alteration

Filemon???
http://www.sysinternals.com/Utilities/Filemon.html

filters as well....

--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day (The
Day of Resurrection)" Al-Quran 6:15
-----------

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: Detecting File Alteration
    ... Windows is preferred since we are trying to deploy host integrity ... > monitoring within an Active Directory environment. ... >> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... >> The NSA has designated Norwich University a center of Academic ...
    (Security-Basics)
  • RE: How to find process behind TCP connection ?
    ... all kinds of things via port TCP/UDP 139. ... I have Windows 2003 server. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: another nc quesiton : tcp tunnels on win32
    ... Its for vpn, but you can use to make tunnels, crypt tunnels and so on. ... how to create TCP tunnels on windows systems? ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: lock down personal Win XP workstation
    ... Description of the Guidance for Securing Microsoft Windows XP Systems ... > console and apply the predefined security template called hisecws.inf. ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The NSA has designated Norwich University a center of Academic ...
    (Security-Basics)
  • Secure communication between WAN links
    ... I am working on an assignment planning and implementing a windows ... We can only use Windows 2003 servers.. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence in Information Security. ...
    (Security-Basics)
Quantcast