(remotely/automatically) Detecting IIS changes?

From: Ralph (ralphlos@hotmail.com)
Date: 03/20/03


From: "Ralph" <ralphlos@hotmail.com>
Date: Thu, 20 Mar 2003 10:46:29 -0800


Thanks for the replies so far. Is the .bin file (since
I've never opened it myself) human-readable? Or is it
encoded somehow?

>-----Original Message-----
>Hi all, I'm working with a team which has been tasked with
>the goal of using a product such as TripWire to detect
>changes (both intentional and otherwise) within our IIS
>servers. Maybe someone can suggest a particular
>file/files/folders/registry keys to watch for changes in?
>I can only think of the global.asa file, but that's lately
>changed to my knowledge.
> For example, we'd like to be alerted when an
>administrator creates a new "Virtual Root" anywhere on the
>IIS box. This is often done hap-hazardly and the IIS admin
>team doesn't always report the creation of the site....so
>we'd like to come up with a way to monitor
them....suggestions?
>.
>


Loading