Security Basics mailing list archives
Re: Hard Drive Intergrety Status
From: Kenton Smith <listsks () yahoo ca>
Date: Thu, 29 Sep 2005 13:03:39 -0400 (EDT)
Basically what you are looking for is the file integrity checking portion of a HIDS, here is a good primer on HIDS - http://www.sans.org/resources/idfaq/host_based.php Here is a Windows product - http://www.rocksoft.com/rocksoft/veracity/index.php If you're looking for Unix/Linux products Samhain is a very good one - http://la-samhna.de/samhain/ A google search for File Integrity checkers will give you these and more. Hope that helps, Kenton --- Nicolas Kramer <nicolaskf () gmail com> wrote:
Isnt there a product that can allert, when files are changed or altered afther boot up, to a sertain server. I mean as follows: 1. Computer boots up. 2. User logs in. 3. Image is made of current C: hdd. 4. if changes occur server is notified. 5. Optional: Prevents changes to happen in C:. On 9/29/05, Kenton Smith <listsks () yahoo ca> wrote:Google for "host based intrusion detection" andyou'llfind lots of alternatives. If you want somethingthatis centralized you'll probably have to go with a commercial product. If you just want somethingthatsend an email when a change is made you may beable touse something open source. Kenton --- Nicolas Kramer <nicolaskf () gmail com> wrote:Can anyone help me with an aplication or methodthatcan succeed in the following task. Check about 60 computers on LAN and all same workgroup the local C: harddisk for changes. And if any changes found(asminimal as possible, like new folder or new suspisiousfiles orsomething) be reported to the server. All the local hdd are almost exactly the same ifnotexactly the same. Server is running win2003 and the clients areallWinNT Any idea how i can accomplish this task? (mayblikea MD5 sum or somthing in that way(though md5 is for files) oranintegrety checker, i heard about it but have no knowledge about it,andgoogle isnt helping me out atm) Thank you very much. Nico -- Nico
__________________________________________________________
Find your next car at http://autos.yahoo.ca-- Nico
__________________________________________________________ Find your next car at http://autos.yahoo.ca
Current thread:
- Hard Drive Intergrety Status Nicolas Kramer (Sep 28)
- RE: Hard Drive Intergrety Status dave kleiman (Sep 30)
- Re: Hard Drive Intergrety Status IRCGNet (Sep 30)
- RE: Hard Drive Intergrety Status Dan Tesch (Sep 30)
- Re: Hard Drive Intergrety Status Kenton Smith (Sep 30)
- Re: Hard Drive Intergrety Status Nicolas Kramer (Sep 30)
- Re: Hard Drive Intergrety Status Kenton Smith (Sep 30)
- Re: Hard Drive Intergrety Status Nicolas Kramer (Sep 30)