RE: File Integrity Monitoring

["Joe_Wulf" <Joe_Wulf () yahoo com>]

I've produced a variation on the file integrity theme with a Unix shell script.
The product is called 'zlister'.
It was designed to satisfy a need and not necessarily the same need with bells
and whistles like tripwire.
The tool is a primary csh script supported by a number of awk scripts.  No need
to compile anything.  Designed to
efficiently execute on any Unix platform, build file system listings and
differentiate across runs what's changed
within the filesystem (not their contents).  CRC/MD5 values are an optional
characteristic.  Once ran, any file
in the file system can be 'found' in seconds with full path and associated
details (a la 'ls').  Older versions
exist on the net today, its not a tool for sale.  I freely share it for
everyone's benefit.  I tweak it and update
it as my time permits.  It functions on Linux, HP-UX, Solaris, DEC, AIX---don't
know about SGI or CRAY as I've
never been able to touch one (anyone GOT an SGI or CRAY) and wanna give these a
test run and show me the results?

I've been adding some functionality recently to accommodate RHEL AS4 and Sun
Solaris 10 (open, commercial and SPARC).
Once I've completed these recent mod's I'd be happy to share the new version.
Older ones can be found by standard
yahoo searches for zlister.  My preferred site that I share with is
'metalab.unc.edu', so supporting them is a
good achievement I appreciate.
 
R,
-Joe Wulf, CISSP, USN (RET)
 ProSync Technology Group, LLC
 www.prosync.com
 Senior IA Engineer

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of s1n04k0 () aol com
Sent: Tuesday, October 31, 2006 11:13
To: security-basics () securityfocus com
Subject: File Integrity Monitoring

I am looking for a File Integrity Monitoring solution and currently looking at
Tripwire. Does anyone know of any similar or better solution?

Any feedback is appreciated.

Thanks





---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------