Re: How to find intruders
From: Shenan Stanley (news_helper_at_hushmail.com)
Date: 03/26/04
- Next message: cquirke (MVP Win9x): "Re: What are the recommended practices for single users?"
- Previous message: Shenan Stanley: "Re: How to detect intruders"
- In reply to: Sanal Kisi: "How to find intruders"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 26 Mar 2004 06:32:35 -0600
Sanal Kisi wrote:
> As the admin, I need to find and detect intruders in my segment. I
> need a tool that will just log the activity tries of the intruders
> together with their IP and MAC addresses.
>
> There are users trying to send trojans and viruses, and even managing
> to get the control of other users PC's.
>
> Any tool/method you can advise
Ouch.
Double posting your question 1.5 hours apart in the same newsgroup with a
different subject line?
Patience.. As and admin, you may want a little of that as well. *grin*
I'll answer again:
Look into setting up a "HoneyPot".
http://www.sans.org/resources/idfaq/honeypot3.php
http://secinf.net/info/ids/IDFAQ/honeypot.htm
http://www.itsolvers4u.com/security/IntruDetect/IDFAQ/honeypot2.htm
-- <- Shenan -> --
- Next message: cquirke (MVP Win9x): "Re: What are the recommended practices for single users?"
- Previous message: Shenan Stanley: "Re: How to detect intruders"
- In reply to: Sanal Kisi: "How to find intruders"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
