Re: Server Auditing

[Muhammad Faisal Rauf Danka <mfrd () attitudex com>]

Wonderful tool made and suggested by Mookhey and his colleagues there for windows NT/2k information gathering.

However, for NDS I'll recommend the following:

http://www.nmrc.org/files/snetware/
http://www.nmrc.org/files/netware/
and specially http://www.nmrc.org/pandora/index.html

and AS/400 *oldie goldie*, there is not much about it though, but anyway following has been always useful for me 
regarding AS/400

http://www.redbooks.ibm.com/pubs/pdfs/redbooks/gg244200.pdf
and 
http://home.earthlink.net/~vleveque/SecQnAframeset.html

If you opt to go for commercial AS/400 stuff, then:
http://www.as400security.net/toolkit/index.htm (I haven't tried it though but remember seeing it quoted somewhere 
sometime)



Regards
--------
Muhammad Faisal Rauf Danka


--- "K. K. Mookhey" <cto () nii co in> wrote:
> Hi,
>
> We have a free tool called DumpWin that does an extensive amount of data gathering on Windows 2000/NT machines 
> including user information, password policies, account lockout policies, etc.
> The URL is http://www.nii.co.in/research/tools.html 
> It's a small exe that runs on the server side, you only need to drop it and execute it.
> Cheers,
>
> K. K. Mookhey
> CTO,
> Network Intelligence India Pvt. Ltd.
> Web: www.nii.co.in
> =================================
> Security Auditing Handbooks
> http://www.nii.co.in/research/handbook.html
> =================================
>
>
> ----- Original Message ----- 
> From: "Steven J. Ursillo, Jr" <sursillojr () sju com>
> To: <security-basics () securityfocus com>
> Sent: Saturday, March 22, 2003 3:21 AM
> Subject: Server Auditing
>
>
> > Hello All,
> >  
> >     I am evaluating the use of different commercial and freeware applications 
> > that can perform audits of users, passwords, and account management 
> > configuration for the following platforms:
> > Windows 2000 Active Directory 
> > Novell NDS/Netware 5.X and above 
> > AS400 
> >     I am looking to run these tools on a laptop with a minimum amount of 
> > server (on servers to be tested) software installation and configuration.  Any 
> > feed back or recommendations would be appreciated.
> >  
> > Thanks
> >  
> >
> >
> > -------------------------------------------------------------------
> > SurfControl E-mail Filter puts the brakes on spam,
> > viruses and malicious code. Safeguard your business
> > critical communications. Download a free 30-day trial:
> > http://www.surfcontrol.com/go/zsfsbl1
>
> -------------------------------------------------------------------
> SurfControl E-mail Filter puts the brakes on spam,
> viruses and malicious code. Safeguard your business
> critical communications. Download a free 30-day trial:
> http://www.surfcontrol.com/go/zsfsbl1

_____________________________________________________________
---------------------------
[ATTITUDEX.COM]
http://www.attitudex.com/
---------------------------

_____________________________________________________________
Select your own custom email address for FREE! Get you () yourchoice com w/No Ads, 6MB, POP & more! 
http://www.everyone.net/selectmail?campaign=tag

-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.surfcontrol.com/go/zsfsbl1