Security Basics mailing list archives

Re: Hard Drive Intergrety Status


From: Nicolas Kramer <nicolaskf () gmail com>
Date: Thu, 29 Sep 2005 18:25:34 +0200

Isnt there a product that can allert, when files are changed or
altered afther boot up, to a sertain server.
I mean as follows:
1. Computer boots up.
2. User logs in.
3. Image is made of current C: hdd.
4. if changes occur server is notified.
5. Optional: Prevents changes to happen in C:.


On 9/29/05, Kenton Smith <listsks () yahoo ca> wrote:
Google for "host based intrusion detection" and you'll
find lots of alternatives. If you want something that
is centralized you'll probably have to go with a
commercial product. If you just want something that
send an email when a change is made you may be able to
use something open source.

Kenton

--- Nicolas Kramer <nicolaskf () gmail com> wrote:

Can anyone help me with an aplication or method that
can succeed in
the following task.

Check about 60 computers on LAN and all same
workgroup the local C:
harddisk for changes. And if any changes found (as
minimal as
possible, like new folder or new suspisious files or
something) be
reported to the server.

All the local hdd are almost exactly the same if not
exactly the same.
Server is running win2003 and the clients are all
WinNT

Any idea how i can accomplish this task? (mayb like
a MD5 sum or
somthing in that way(though md5 is for files) or an
integrety checker,
i heard about it but have no knowledge about it, and
google isnt
helping me out atm)

Thank you very much.
Nico

--
Nico








__________________________________________________________
Find your next car at http://autos.yahoo.ca



--
Nico


Current thread: