(remotely/automatically) Detecting IIS changes?
From: Ralph (ralphlos@hotmail.com)
Date: 03/20/03
- Next message: Keith W. McCammon: "Re: (remotely/automatically) Detecting IIS changes?"
- Previous message: Keith W. McCammon: "***MS03-007 FAQ @ WWW.NTBUGTRAQ.COM***"
- In reply to: Ralph: "(remotely/automatically) Detecting IIS changes?"
- Next in thread: Keith W. McCammon: "Re: (remotely/automatically) Detecting IIS changes?"
- Reply: Keith W. McCammon: "Re: (remotely/automatically) Detecting IIS changes?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Ralph" <ralphlos@hotmail.com> Date: Thu, 20 Mar 2003 10:46:29 -0800
Thanks for the replies so far. Is the .bin file (since
I've never opened it myself) human-readable? Or is it
encoded somehow?
>-----Original Message-----
>Hi all, I'm working with a team which has been tasked with
>the goal of using a product such as TripWire to detect
>changes (both intentional and otherwise) within our IIS
>servers. Maybe someone can suggest a particular
>file/files/folders/registry keys to watch for changes in?
>I can only think of the global.asa file, but that's lately
>changed to my knowledge.
> For example, we'd like to be alerted when an
>administrator creates a new "Virtual Root" anywhere on the
>IIS box. This is often done hap-hazardly and the IIS admin
>team doesn't always report the creation of the site....so
>we'd like to come up with a way to monitor
them....suggestions?
>.
>
- Next message: Keith W. McCammon: "Re: (remotely/automatically) Detecting IIS changes?"
- Previous message: Keith W. McCammon: "***MS03-007 FAQ @ WWW.NTBUGTRAQ.COM***"
- In reply to: Ralph: "(remotely/automatically) Detecting IIS changes?"
- Next in thread: Keith W. McCammon: "Re: (remotely/automatically) Detecting IIS changes?"
- Reply: Keith W. McCammon: "Re: (remotely/automatically) Detecting IIS changes?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]